CVE-2026-97278

HIGH NVD

CVSS Score 7.2

Severity HIGH

Published Oct 14, 2026

Vendor unknown

Description

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9.

References

https://patchstack.com/database/wordpress/plugin/polylang/vulnerability/wordpress-polylang-plugin-3-8-9-php-object-injection-vulnerability?_s_id=cve