Medium 5.3 Unfixed
2025-05-16≤ 2.3.7
WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability
Minimum safe version
2.3.7
Update to 2.3.7 or later to address 6 fixable vulnerabilities
WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability
CVE-2024-13320
WooCommerce Multi Currency < 2.1.18 - Authenticated Product Price Change
CVE-2021-4379
CVE-2021-4376
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
WordPress WooCommerce Multi Currency - Currency Switcher premium plugin <= 2.1.17 - Authenticated Product Price Change vulnerability