falang

WordPress · Plugin

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Falang multilanguage for WordPress <= 1.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via falang_term[] via `falang_language_ordering` AJAX / `edit_term` hookCVE-2026-118047	falang	WordPress	Medium	Fix reported	2026-11-07
Falang multilanguage for WordPress <= 1.4.5 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-105262	falang	WordPress	Medium	Fix reported	2026-10-23
Falang multilanguage for WordPress <= 1.4.2 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-54805	falang	WordPress	High	Fix reported	2026-06-25
Falang multilanguage <= 1.3.65 - Unauthenticated PHP Object InjectionCVE-2025-58619	falang	WordPress	High	Fix reported	2025-09-22
Falang multilanguage <= 1.3.61 - Cross-Site Request ForgeryCVE-2025-48285	falang	WordPress	Medium	Fix reported	2025-05-28
Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information ExposureCVE-2024-6869	falang	WordPress	Medium	Fix reported	2024-08-08
Falang multilanguage <= 1.3.51 - Cross-Site Request ForgeryCVE-2024-37240	falang	WordPress	Medium	Fix reported	2024-06-27
Falang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-4417	falang	WordPress	Medium	Fix reported	2024-05-11
Falang multilanguage <= 1.3.47 - Authenticated (Administrator+) SQL InjectionCVE-2024-30495	falang	WordPress	High	Fix reported	2024-04-04
Falang multilanguage <= 1.3.39 - Cross-Site Request Forgery via add_languageCVE-2023-37968	falang	WordPress	Medium	Fix reported	2024-01-22
Falang multilanguage for WordPress < 1.3.18 - Reflected Cross-Site Scripting	falang	WordPress	Medium	Fix reported	2024-01-22