CVE-2026-124409

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.21...

EUVD-2026-125360

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.21...

CVE-2026-124409

The CURCY (woo-multi-currency) WordPress plugin, developed by VillaTheme, is affected by a Missing Authorization vulnerability (CWE-862) in versions 2.2.21 and below . This security flaw allows attackers to exploit incorrectly configured access control security levels . While the vulnerability is...

CVE-2026-124409 WordPress CURCY plugin <= 2.2.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.21...

WordPress CURCY plugin <= 2.2.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by hera-user in WordPress Plugin CURCY versions = 2.2.21...

CVE-2026-122663

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20...

CVE-2026-121775

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20...

EUVD-2026-119223

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20...

CVE-2026-121775

The VillaTheme CURCY woo-multi-currency WordPress plugin, versions n/a through 2.2.20 , is vulnerable to a Broken Access Control issue (CWE-862 ). The vulnerability stems from incorrectly configured access control security levels , which allows for missing authorization. This flaw can lead to an ...

CVE-2026-121775 WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20...

WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Anurag Dharmendra Kumar Maurya in WordPress Plugin CURCY versions = 2.2.20...

CVE-2026-122663

The VillaTheme CURCY woo-multi-currency WordPress plugin (versions n/a through 2.2.20 ) is susceptible to a Broken Access Control vulnerability. The root cause is a Missing Authorization flaw that allows for the exploitation of Incorrectly Configured Access Control Security Levels . This vulnerab...

CVE-2026-122663 WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20...

EUVD-2026-119220

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20...

WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Harry Nguyen in WordPress Plugin CURCY versions = 2.2.20...

CVE-2026-97071

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071

The VillaTheme CURCY (woo-multi-currency) WordPress plugin versions up to and including 2.2.17 is vulnerable to an Incorrect Calculation vulnerability (CWE-682). This flaw allows for Integer Attacks , potentially impacting the integrity of data during currency calculations. No specific exploitati...

EUVD-2026-92310

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...