CVE Intelligence

WP SYNTEX vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WP SYNTEX products: 2 record(s), with severity, exploitation and fixes.

Polylang 2

Exploited only (KEV) →

CVE-2026-97278 High · 7.2 CWE-502 Oct 14, 2026
WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9.
CVE-2026-39783 Medium · 4.3 CWE-862 Oct 5, 2026
WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7.