Plugin icon

Polylang

polylang

Vulnerabilities:

4

Last Updated:

September 8, 2026

Active Installs:

800000

Published
Title
Fixed in
CVSS
Published
2026-07-22
Title
Polylang < 3.8.6 - Contributor+ Private Post Disclosure via Row Update AJAX Actions
Fixed in
Fixed in 3.8.6
CVSS
2.7 (low)
Published
2025-10-28
Title
Polylang < 3.7.4 - Contributor+ PHP Object Injection
Fixed in
Fixed in 3.7.4
CVSS
6.6 (medium)
Published
2019-01-16
Title
Polylang <= 2.5 - CSRF in categories and media duplication
Fixed in
Fixed in 2.5.1
CVSS
n/a
Published
2014-08-01
Title
Polylang 1.5.1 - User Description H&ling Stored XSS
Fixed in
Fixed in 1.5.2
CVSS
n/a