CVE-2025-64353

WordPress Polylang plugin <= 3.7.3 - Deserialization of untrusted data vulnerability

Description

Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through <= 3.7.3.

INFO

Published Date :

2025-10-31T11:42:25.417Z

Last Modified :

2025-10-31T18:58:13.107Z

Source :

Patchstack

AFFECTED PRODUCTS

The following products are affected by CVE-2025-64353 vulnerability.

Vendors	Products
Wordpress	Wordpress

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-64353.

URL	Resource
https://vdp.patchstack.com/database/Wordpress/Plugin/polylang/vulnerability/wordpress-polylang-plugin-3-7-3-deserialization-of-untrusted-data-vulnerability