Skip to content
OpenAdvisories

Vendor

sbouey

7 known vulnerabilities.

Products

Falang multilanguage 4 Falang multilanguage for WordPress 3
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-118047

    Falang multilanguage for WordPress <= 1.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via falang_term[] via `falang_language_ordering` AJAX / `edit_term` hook

    The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'falang_term[<taxonomy>][<locale>][<field>] (via order[] driving wp_update_term)' parameter in all versions up to, and including, 1.4.6 due to ins…

    sbouey Falang multilanguage for WordPress Web / CMS
  • Medium 4.3
    CVE-2025-48285

    WordPress Falang multilanguage plugin <= 1.3.61 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through <= 1.3.61.

    sbouey Falang multilanguage
  • Medium 4.3
    CVE-2024-37240

    WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through <= 1.3.51.

    sbouey Falang multilanguage Web / CMS
  • Medium 5.4
    CVE-2024-6869

    Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure

    The Falang multilanguage for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.3.52. This makes it possible for authenticated attack…

    sbouey Falang multilanguage for WordPress Web / CMS
  • Medium 4.4
    CVE-2024-4417

    Falang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.49 due to insufficient input sanitization and output escaping. This makes it possible for aut…

    sbouey Falang multilanguage for WordPress Web / CMS