Chouby vulnerabilities

Products

• Polylang 3
• Polylang Pro 1

Latest Chouby CVEs

Newest publication first

1. CVE-2026-97279 WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability

   Published 2026-09-30

   Medium·CVSS 6.5 EPSS 0.15%

   Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.

2. CVE-2026-65458 WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability

   Published 2026-07-23

   Medium·CVSS 4.3 EPSS 0.30%

   Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5.

3. CVE-2025-64353 WordPress Polylang plugin <= 3.7.3 - Deserialization of untrusted data vulnerability

   Published 2025-10-31

   High·CVSS 8.8 EPSS 0.36%

   Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through <= 3.7.3.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.