A missing authorization vulnerability exists in WP SYNTEX Polylang plugin versions up to 3.9. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized information disclosure and modification. The vulnerability has a medium severity rating with a CVSS score of 5.4.