CVE Intelligence

VillaTheme CURCY vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting VillaTheme CURCY: 2 record(s), with affected versions and fixes.

CVE-2026-97071 Medium · 5.3 CWE-682 Oct 5, 2026
WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability
Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17.
CVE-2026-94171 High · 7.1 CWE-79 Sep 30, 2026
WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY woo-multi-currency allows DOM-Based XSS.This issue affects CURCY: 2.2.18.