CVE-2026-39783

MEDIUM NVD

CVSS Score 4.3

Severity MEDIUM

Published Oct 05, 2026

Vendor unknown

Description

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7.

References

https://patchstack.com/database/wordpress/plugin/polylang/vulnerability/wordpress-polylang-plugin-3-8-7-sensitive-data-exposure-vulnerability?_s_id=cve