Plugin icon

CURCY – Multi Currency for WooCommerce

woo-multi-currency

Vulnerabilities:

6

Last Updated:

September 26, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-10-05
Title
CURCY – Multi Currency for WooCommerce < 2.2.18 - Missing Authorization
Fixed in
Fixed in 2.2.18
CVSS
5.3 (medium)
Published
2026-09-30
Title
CURCY – Multi Currency for WooCommerce 2.2.18 - Unauthenticated Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
7.2 (high)
Published
2026-07-02
Title
CURCY < 2.2.15 - Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter
Fixed in
Fixed in 2.2.15
CVSS
6.5 (medium)
Published
2025-02-05
Title
CURCY – Multi Currency for WooCommerce < 2.2.6 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
Fixed in
Fixed in 2.2.6
CVSS
7.3 (high)
Published
2024-10-15
Title
CURCY < 2.2.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.2.4
CVSS
6.1 (medium)
Published
2022-05-31
Title
CURCY < 2.1.18 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.18
CVSS
6.1 (medium)