Vulnerabilities / Polylang

Polylang vulnerabilities

Advisories WPSec published for Polylang. Other sources may list more. Its attack surface: Polylang on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-14 WPSEC-2026-0893 Polylang <= 3.8.10 - Authenticated (Editor+) PHP Object Injection via Term Description Medium 6.6 3.8.11

License: CC BY 4.0