Medium severity4.3NVD Advisory· Published Jul 23, 2026· Updated Aug 6, 2026

CVE-2026-65458

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data.

This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Polylanginferred2 versions
<=3.8.5+ 1 more
- (no CPE)range: <=3.8.5
- (no CPE)range: <=3.8.5
Package: https://wordpress.org/plugins/polylang

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/polylang/vulnerability/wordpress-polylang-plugin-3-8-5-sensitive-data-exposure-vulnerabilitynvd

News mentions

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)
Wordfence Blog · Jul 30, 2026

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000