Extension WordPress
Vulnérabilités CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
Cette page rassemble les failles publiées pour CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x
7 fiches
CURCY <= 2.2.14 – Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter
The The CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.2.14. This is due to the software allowing users…
*-2.2.14
2.2.15
02/07/2026
CURCY – Multi Currency for WooCommerce <= 2.2.5 – Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
The The CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution via the get_products_price() function in all versions up…
*-2.2.5
2.2.6
05/02/2025
CURCY <= 2.2.3 – Reflected Cross-Site Scripting
The CURCY plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-2.2.3
2.2.4
15/10/2024
CURCY – Multi Currency for WooCommerce <= 2.2.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The CURCY – Multi Currency for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.2.0.1 due to insufficient input sanitization and output escaping on user supplied input. This makes…
*-2.2.0.1
2.2.1
19/12/2023
CURCY <= 2.1.25 – Missing Authorization to Currency Exchange Retrieval
The CURCY plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woomulticurrency_exchange' function in versions up to, and including, 2.1.25. This makes it possible for unauthenticated-level attackers to access…
*-2.1.25
2.1.26
06/02/2023
CURCY <= 2.1.17 – Reflected Cross-Site Scripting
The CURCY plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in versions up to, and including, 2.1.17. This makes it possible for unauthenticated attackers to…
*-2.1.17
2.1.18
31/05/2022
WooCommerce Multi Currency <= 2.1.17 – Missing Authorization
The WooCommerce Multi Currency plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.17. This makes it possible for authenticated attackers to change the price of a product to an arbitrary value.
*-2.1.17
2.1.18
13/09/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.