Plugin icon

Polylang

polylang

Vulnerabilities:

7

Last Updated:

October 21, 2026

Active Installs:

900000

Published
Title
Fixed in
CVSS
Published
2026-10-12
Title
Polylang < 3.8.10 - Editor+ PHP Object Injection
Fixed in
Fixed in 3.8.10
CVSS
6.6 (medium)
Published
2026-10-05
Title
Polylang < 3.8.8 - Contributor+ Sensitive Information Exposure
Fixed in
Fixed in 3.8.8
CVSS
2.7 (low)
Published
2026-09-30
Title
Polylang < 3.8.10 - Contributor+ Stored XSS
Fixed in
Fixed in 3.8.10
CVSS
5.5 (medium)
Published
2026-07-22
Title
Polylang < 3.8.6 - Contributor+ Private Post Disclosure via Row Update AJAX Actions
Fixed in
Fixed in 3.8.6
CVSS
2.7 (low)
Published
2025-10-28
Title
Polylang < 3.7.4 - Contributor+ PHP Object Injection
Fixed in
Fixed in 3.7.4
CVSS
6.6 (medium)
Published
2019-01-16
Title
Polylang <= 2.5 - CSRF in categories and media duplication
Fixed in
Fixed in 2.5.1
CVSS
n/a
Published
2014-08-01
Title
Polylang 1.5.1 - User Description H&ling Stored XSS
Fixed in
Fixed in 1.5.2
CVSS
n/a