Falang multilanguage for WordPress
Falang multilanguage for WordPress has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 9 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2024 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (33%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.
Every one of the 9 issues recorded for Falang multilanguage for WordPress has a vendor fix available, so running the current release closes all known holes.
9 independent researchers contributed these findings, one record each. Falang multilanguage for WordPress is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-54805Falang multilanguage for WordPress <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation
Read the full analysisVulnerability Records
Falang multilanguage for WordPress
Author
sbouey
Falang is a multilanguage plugin for WordPress. It allows you to translate an existing WordPress site to other languages. Falang natively supports WooCommerce (product, variation, category, tag, attribute, etc.) You can use translation services such as Google, Azure, DeepL (Pro), or ChatGPT (Pro) to assist you. Free vs Pro Pro version: – Enabled popup translation for (menu/post,product…) – ChatGPT translation service – DeepL translation service – Translate/configure WooCommerce email – has on-site support and language filtering – documentation – WP User Manager – YITH WooCommerce Compare – WC Product addons – CookieYes – and more…. Concept Easy setup Supports all languages supported by WordPress (RTL and LTR) Translate additional plugins like WooCommerce, Yoast SEO, etc. You can use Google, Azure, Lingvanex to help you with the translation (DeepL services available in Pro version) Translation are set in the meta, the original content is not modified. When you add a language in Falang, WP language packages are automatically downloaded and updated Easy to use: Translate Posts, Pages, Menus, Categories from the plugin or linked from the WP interface Translate Posts and Terms permalinks Displays the default language if the content is not yet translated The Language Switcher widget is configurable to display flags and/or language names Language Switcher can be put in Menu, Header, Footer, Sidebars Image captions, alt text and other media text translation without duplicating the media files Language Code directly in the URL No extra database tables created, no content duplication Very good website speed performance (low impact) Contains translations for IT, FR, DE, ES, NL Falang is not meant for WordPress multisite installations! Falang’s goal is to let you translate everything on your page Taxonomies Menu items Theme and plugin strings Custom fields Page builder content Widgets Shortcode outputs URL slugs WooCommerce products Page title and description Image alt text and captions Quick start video Falang and Falang for Elementor Lite (English version) (French version with english subtitles) Also available Falang WPML Importer Falang WPML Importer Falang Q-Importer qTranslateX to Falang Falang for Divi Falang for Divi Falang for Elementor Falang for Elementor Falang for WPBakery Falang for WPBakery Falang for YooTheme Falang for YOOtheme Falang integration My Agile Privacy Known issues The WooCommerce attribute slug doesn’t have to be translated
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C