Chouby vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.1%	CVE-2026-97279Polylang (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.1%2026-09-30CVE Database V5CVE-2026-97279 Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions. EPSS 0.1%Vulnerability Chouby CWE-79	CVE Database V5	2026-09-30
Medium	4.3	EPSS 0.3%	CVE-2026-65458Polylang (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium4.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65458 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5. EPSS 0.3%Vulnerability Chouby CWE-497	CVE Database V5	2026-07-23
High	8.8	EPSS 0.4%	CVE-2025-64353Polylang (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.4%2025-10-31CVE Database V5CVE-2025-64353 Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through <= 3.7.3. EPSS 0.4%Vulnerability Chouby	CVE Database V5	2025-10-31

Page 1 of 1