Hyyan Integration for WooCommerce and Polylang
Hyyan Integration for WooCommerce and Polylang has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; none of them are fixed as of October 2026. Their average CVSS score is 5.4, and the most serious one scores 6.5 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include SQL Injection.
None of the 2 issues recorded for Hyyan Integration for WooCommerce and Polylang have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
2 independent researchers contributed these findings, one record each. Hyyan Integration for WooCommerce and Polylang is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-101926Hyyan WooCommerce Polylang Integration <= 1.5.0 - Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter
Read the full analysisVulnerability Records
Hyyan Integration for WooCommerce and Polylang
Author
Hyyan Abo Fakher
Build a multilingual WooCommerce store with Polylang. Translate products and store pages, synchronize shared product data, and let customers shop in their chosen language. Documentation | Getting started | Report an issue For bug reports and feature requests, please use GitHub issues and include your plugin versions and steps to reproduce. Remove private data from any logs you share. Features [√] Auto Download Woocommerce Translation Files [√] Page Translation [√] Endpoints Translation [√] Product Translation [√] Categories [√] Tags [√] Attributes [√] Shipping Classes [√] Meta Synchronization [√] Variation Product [√] Product Gallery [√] Order Translation [√] Stock Synchronization [√] Cart Synchronization [√] Coupon Synchronization [√] Emails [√] Reports [√] Filter by language [√] Combine reports for all languages What you need to know about this plugin The plugin declares WordPress 5.4+, PHP 7.0+, WooCommerce 3.0+, and Polylang 2.0+. Your installed dependencies may require newer PHP versions. Version 1.6.0 has been tested with WordPress 7.1.3, WooCommerce 11.1.2, Polylang 3.8.10, and PHP 8.5.11. Older supported versions have not all been retested. Back up your store and test updates on a staging site first. Choose your default language before creating variable products; changing it afterward is unsupported. Polylang’s “The language is set from content” URL mode is also unsupported. Setup your environment Configure WooCommerce, Polylang, and your store languages before activating this plugin. Review Settings > WooPoly, translate your store pages, and check their language assignments. Translate product categories and attributes as needed, then create and link product translations. Test product selection, stock, cart, checkout, and emails in every store language before going live. Keep in touch Created by Hyyan Abo Fakher. If WooPoly is useful to you, a star on GitHub helps others discover it. You are also welcome to follow my work on GitHub or LinkedIn. Translations Arabic by Hyyan Abo Fakher Spanish by nunhes Contributing Everyone is welcome to help contribute and improve this plugin. There are several ways you can contribute: Reporting issues (please read issue guidelines) Suggesting new features Writing or refactoring code Improving documentation Fixing issues
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C