Advisories · Technology

Chouby Polylang.

Every CVE that names Chouby Polylang among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97279 CVE record

CVSS 6.5 Medium

WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability
- Chouby Polylang
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-65458 CVE record

CVSS 4.3 Medium

WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability
- Chouby Polylang
- Chouby Polylang Pro
- Information disclosure
Not analysed yet 23 Jul 2026
CVE-2025-64353 CVE record

CVSS 8.8 High

WordPress Polylang plugin <= 3.7.3 - Deserialization of untrusted data vulnerability
- Chouby Polylang
- Insecure deserialization
Not analysed yet 31 Oct 2025