CVE-2026-101926

The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.5.0 . The flaw exists in the woocommerce_remove_variations AJAX action due to insufficient escaping and lack of sufficient preparation on the user-supplied variation_id...

EUVD-2026-100812

The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variationids' parameter of the 'woocommerceremovevariations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficie...