WordPress security by component
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
Plugin description
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x is a WordPress component with 6 published CVE records in this archive. The latest tracked vulnerability was published Jul 03, 2026; the highest CVE/CNA score is 7.3.
Plugin slug:
woo-multi-currencyLatest vulnerability
CVE-2026-11778: CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x: A security weakness
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.2.14.
| Safe version |
|
||
|---|---|---|---|
| Jul 03, 2026 |
CVE-2026-11778
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x: A security weakness
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.2.14.
|
> 2.2.14 |
CVE5.4
NVDPending
|
| Feb 06, 2025 |
CVE-2024-13487
best free currency exchange plugin – Run smoothly on WooCommerce 9.x: A security weakness
best free currency exchange plugin – Run smoothly on WooCommerce 9.x is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.3
NVDPending
|
| Dec 13, 2024 |
CVE-2022-46796
CURCY: A security weakness
CURCY is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 17, 2024 |
CVE-2024-49283
CURCY: Cross-site scripting
CURCY is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Dec 21, 2023 |
CVE-2023-50831
CURCY – Multi Currency for WooCommerce: Cross-site scripting
CURCY – Multi Currency for WooCommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Jun 07, 2023 |
CVE-2021-4376
WooCommerce Multi Currency: A security weakness
WooCommerce Multi Currency is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVD4.3
|