Advisories · Technology
villatheme CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x.
Every CVE that names villatheme CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
CURCY <= 2.2.14 - Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter
- villatheme CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
- Code injection
- CVSS 7.3 High
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
- villatheme CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
- Code injection
- CVSS 4.3 Medium
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
- villatheme CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
- Broken access control