What’s Vulnerable › Products

webilop User Language Switch vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your webilop User Language Switch version is affected

Latest webilop User Language Switch vulnerabilities

• CVE-2026-0745 — User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter (CVSS 5.5)
• CVE-2026-0735 — User Language Switch <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'tab_color_picker_language_switch' Parameter (CVSS 4.4)
• CVE-2025-49064 — WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)