Skip to content
OpenAdvisories

Product · sbouey

Falang multilanguage for WordPress

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-118047

    Falang multilanguage for WordPress <= 1.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via falang_term[] via `falang_language_ordering` AJAX / `edit_term` hook

    The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'falang_term[<taxonomy>][<locale>][<field>] (via order[] driving wp_update_term)' parameter in all versions up to, and including, 1.4.6 due to ins…

    sbouey Falang multilanguage for WordPress Web / CMS
  • Medium 5.4
    CVE-2024-6869

    Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure

    The Falang multilanguage for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.3.52. This makes it possible for authenticated attack…

    sbouey Falang multilanguage for WordPress Web / CMS
  • Medium 4.4
    CVE-2024-4417

    Falang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.49 due to insufficient input sanitization and output escaping. This makes it possible for aut…

    sbouey Falang multilanguage for WordPress Web / CMS