Falang multilanguage for WordPress vulnerabilities
We track 1 vulnerability in Falang multilanguage for WordPress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest Falang multilanguage for WordPress vulnerabilities
- 8.0 High severity
Falang multilanguage for WordPress: Improper Neutralization of Input During Web Page Generation
The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when saving term translations, and exposes a valid nonce to any logged-in user through an unprotected handler, allowing users with Subscriber-level access and above