Skip to content
OpenAdvisories

Vendor

hyyan

1 known vulnerabilities.

Products

Hyyan WooCommerce Polylang Integration 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-101926

    Hyyan WooCommerce Polylang Integration <= 1.5.0 - Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter

    The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' parameter of the 'woocommerce_remove_variations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the use…

    hyyan Hyyan WooCommerce Polylang Integration Web / CMS