Plugin icon

Polylang

polylang

Vulnerabilities:

3

Last Updated:

April 27, 2026

Active Installs:

800000

Published
Title
Fixed in
CVSS
Published
2025-10-28
Title
Polylang < 3.7.4 - Contributor+ PHP Object Injection
Fixed in
Fixed in 3.7.4
CVSS
6.6 (medium)
Published
2019-01-16
Title
Polylang <= 2.5 - CSRF in categories and media duplication
Fixed in
Fixed in 2.5.1
CVSS
n/a
Published
2014-08-01
Title
Polylang 1.5.1 - User Description H&ling Stored XSS
Fixed in
Fixed in 1.5.2
CVSS
n/a