Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Webilop Clear all filters
TI-2026-00522 CVE-2026-0735 · GHSA-r8hc-3q2v-m9fj

Cross-site scripting in Webilop User Language Switch

Priority LOW 20

The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_color_picker_language_switch' parameter in all versions up to, and including, 1.6.10 due to insufficient input sanit…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00276 Published 2026-02-14 No fix listed CWE-79
TI-2026-00531 CVE-2026-0745 · GHSA-m38c-5p3m-p7gm

Server-side request forgery in Webilop User Language Switch

Priority LOW 25

The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL validation on the 'download_language()' function.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00377 Published 2026-02-14 No fix listed CWE-918
TI-2025-31179 CVE-2025-49064 · GHSA-578w-94fj-8394

WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilop User Language Switch user-language-switch allows Reflected XSS.This issue affects User Language Switch: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00249 Published 2025-08-14 No fix listed CWE-79
TI-2025-20190 CVE-2025-27343 · GHSA-889g-6x77-qwm5

WordPress WooCommerce HTML5 Video Plugin <= 1.7.10 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilop WooCommerce HTML5 Video woocommerce-html5-video allows Reflected XSS.This issue affects WooCommerce HTML5 Vide…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79