Webilop

Products

ProductCVEsExploitedLatest
User Language Switch3–Feb 14, 2026
WooCommerce HTML5 Video1–Apr 17, 2025

Exploited and recent CVEs

  • CVE-2026-0735 Medium 4.4 User Language Switch <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'tab_color_picker_language_switch' Parameter 0.3%
  • CVE-2026-0745 Medium 5.5 User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter 0.4%
  • CVE-2025-49064 High 7.1 WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-27343 High 7.1 WordPress WooCommerce HTML5 Video Plugin <= 1.7.10 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%