Webilop vulnerabilities
4 published CVEs name Webilop among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-0735
User Language Switch <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'tab_color_picker_language_switch' Parameter
webilop · User Language Switch
Medium4.4 - CVE-2026-0745
User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter
webilop · User Language Switch
Medium5.5 - CVE-2025-49064
WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability
Webilop · User Language Switch
High7.1 - CVE-2025-27343
WordPress WooCommerce HTML5 Video Plugin <= 1.7.10 - Reflected Cross Site Scripting (XSS) vulnerability
Webilop · WooCommerce HTML5 Video
High7.1