CVE-2026-105262 - Falang multilanguage for WordPress < 1.4.6 - Subscriber+ Stored XSS via Term Translation
CVE ID :CVE-2026-105262 Published : Oct. 21, 2026, 6:16 a.m. | 5 hours, 50 minutes ago Description :The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when saving term translations, and exposes a valid nonce to any logged-in user through an...