Skip to content
Noroxi

Polylang

polylang · plugin

Known security vulnerabilities for Polylang. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Sep 30, 2026

Vulnerabilities

  • CVE-2025-64353

    WordPress Polylang plugin <= 3.7.3 - Deserialization of untrusted data vulnerability

    High 8.8

  • CVE-2026-97279

    WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-65458

    WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability

    Medium 4.3

  • CVE-2014-4855

    Cross-site scripting (XSS) vulnerability in the Polylang plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web s

    Medium 4.3

← Back to directory