Medium · 4.3 CVE-2026-65458 EUVD-2026-48223GHSA-gmph-4533-hxfg

WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability

Published Jul 23, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack

Vendor: Chouby Product: Polylang Product: Polylang Pro

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data.

This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5.

Affected products

Vendor	Product	Affected	Fixed
Chouby	Polylang	≤ 3.8.5	—
Chouby	Polylang Pro	≤ 3.8.5	—

References

https://patchstack.com/database/wordpress/plugin/polylang/vulnerability/wordpress-polylang-plugin-3-8-5-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry