Software intelligence
Important: Woo Multi Currency appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
7
Latest advisory
2 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
woo-multi-currency
Plugin
This catalog lists 7 known advisories affecting Woo Multi Currency. The most recent was published on 2 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
CURCY <= 2.2.14 - Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 2 July 2026
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 5 February 2025
CURCY <= 2.2.3 - Reflected Cross-Site Scripting
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 15 October 2024
Known Woo Multi Currency advisories published by month.
CVE-2026-11778 · Published 2 July 2026
Affected versions: ≤ 2.2.14
CVE-2024-13487 · Published 5 February 2025
Affected versions: ≤ 2.2.5
CVE-2024-49283 · Published 15 October 2024
Affected versions: ≤ 2.2.3
CVE-2023-50831 · Published 19 December 2023
Affected versions: ≤ 2.2.0.1
CVE-2022-46796 · Published 6 February 2023
Affected versions: ≤ 2.1.25
No CVE assigned · Published 31 May 2022
Affected versions: ≤ 2.1.17
CVE-2021-4376 · Published 13 September 2021
Affected versions: ≤ 2.1.17
SiteRespond Defence matches your installed Woo Multi Currency version against this catalog when the Defence plugin is connected to your WordPress site.