WordPress plugin
Hyyan Integration for WooCommerce and Polylang security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium2
- Low0
All Hyyan Integration for WooCommerce and Polylang vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter ≤1.5.0No patch available | CVE-2026-101926 | |
| Medium4.3 | Missing Authorization ≤1.5.0No patch available | CVE-2026-24585 |
- Medium6.5Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter
≤1.5.0No patch available
- Medium4.3Missing Authorization
≤1.5.0No patch available
Hyyan Integration for WooCommerce and Polylang: common questions
Does Hyyan Integration for WooCommerce and Polylang have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Hyyan Integration for WooCommerce and Polylang: 2 medium. At least one is not fixed in the latest version.
How do I check which version of Hyyan Integration for WooCommerce and Polylang I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Hyyan Integration for WooCommerce and Polylang vulnerability?
CVE-2026-101926, published Oct 13, 2026: Hyyan WooCommerce Polylang Integration <= 1.5.0 - Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter. Severity: Medium (CVSS 6.5).
Is any Hyyan Integration for WooCommerce and Polylang vulnerability listed in CISA KEV?
No. None of the known Hyyan Integration for WooCommerce and Polylang vulnerabilities is currently listed in the CISA KEV catalog.