[CVE-2026-97278] Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injecti…

Descripción técnica

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9.

Puntuación CVSS

Score: 7.2/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-502

Fuente oficial

Publicado en NIST NVD.