WordPress Polylang Pro plugin < 3.7.4 - Contributor+ PHP Object Injection vulnerability

Contributor+ PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Polylang Pro versions 3.7.4...

WordPress Polylang Pro plugin < 3.8.10 - Editor+ PHP Object Injection vulnerability

Editor+ PHP Object Injection vulnerability discovered by Ananda Dhakal in WordPress Plugin Polylang Pro versions 3.8.10...

WordPress Polylang Pro plugin < 3.8.6 - Contributor+ Private Post Disclosure via Row Update AJAX Actions vulnerability

Contributor+ Private Post Disclosure via Row Update AJAX Actions vulnerability discovered by Ananda Dhakal in WordPress Plugin Polylang Pro versions 3.8.6...

WordPress Polylang Pro plugin < 3.8.10 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Intrudify in WordPress Plugin Polylang Pro versions 3.8.10...

WordPress Polylang Pro plugin < 3.8.8 - Contributor+ Sensitive Information Exposure vulnerability

Contributor+ Sensitive Information Exposure vulnerability discovered by Ananda Dhakal in WordPress Plugin Polylang Pro versions 3.8.8...

CVE-2026-19760: Improper Neutralization of Input During Web Page Generation

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

WordPress Polylang Pro plugin <= 3.8.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Polylang Pro versions = 3.8.5...