Volerion logoVolerion
Volerion logoVolerion

Chouby Polylang Deserialization of Untrusted Data Vulnerability Allowing Object Injection

Vulnerability

A deserialization vulnerability allowing object injection has been identified in the Chouby Polylang WordPress plugin, affecting versions through 3.7.3. This vulnerability arises from the improper handling of untrusted data during the deserialization process.

Impact

Exploitation of this vulnerability could lead to object injection, which may be used to manipulate application logic or execute arbitrary code, depending on the context.

Added: Oct 31, 2025, 12:23 PM
Updated: Oct 31, 2025, 7:36 PM

Vulnerability Rating

Custom Algorithm
spread
6.4
impact
0.6
exploitability
7.6
remediation
0.0
relevance
0.9
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.