Advisories · Technology

Amir Helzer WooCommerce Multilingual & Multicurrency.

Every CVE that names Amir Helzer WooCommerce Multilingual & Multicurrency among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-62130 CVE record

CVSS 7.2 High

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
- Amir Helzer WooCommerce Multilingual & Multicurrency
- Insecure deserialization
Not analysed yet 10 Oct 2026
CVE-2026-66711 CVE record

CVSS 7.1 High

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability
- Amir Helzer WooCommerce Multilingual & Multicurrency
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2026
CVE-2025-26888 CVE record

CVSS 5.3 Medium

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability
- Amir Helzer WooCommerce Multilingual & Multicurrency
- Broken access control
Not analysed yet 9 Apr 2025
CVE-2024-44006 CVE record

CVSS 4.3 Medium

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability
- Amir Helzer WooCommerce Multilingual & Multicurrency
- Broken access control
Not analysed yet 1 Nov 2024