Advisories · Technology

WP SYNTEX Polylang.

Every CVE that names WP SYNTEX Polylang among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97278 CVE record

CVSS 7.2 High

WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability
- WP SYNTEX Polylang
- Insecure deserialization
Not analysed yet 14 Oct 2026
CVE-2026-39783 CVE record

CVSS 4.3 Medium

WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerability
- WP SYNTEX Polylang
- Broken access control
Not analysed yet 5 Oct 2026