PT-2026-63881

CVE-2026-65458

·

Published

2026-07-22

·

Updated

2026-08-06

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Polylang versions prior to 3.8.6 Polylang Pro versions prior to 3.8.6
Description An issue allows the retrieval of embedded sensitive data, exposing system information to an unauthorized control sphere. Authenticated attackers with Contributor-level access and above can extract sensitive user or configuration data.
Recommendations Update Polylang to version 3.8.6 or later. Update Polylang Pro to version 3.8.6 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Related identifiers
CVE-2026-65458
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com