58 matches found
CVE-2026-120563
The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 5.5.7. This is due to insufficient input validation on the currency exchange rate parameter in the savecurrency AJAX handler, which lacks capability...
EUVD-2026-115667
The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 5.5.7. This is due to insufficient input validation on the currency exchange rate parameter in the savecurrency AJAX handler, which lacks capability...
CVE-2026-62130
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency = 5.5.8 versions...
CVE-2026-62130
The WordPress WooCommerce Multilingual & Multicurrency plugin in versions
CVE-2026-62130 WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency = 5.5.8 versions...
CVE-2026-62130 WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency = 5.5.8 versions...
EUVD-2026-96512
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency = 5.5.8 versions...
PT-2026-109844
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency = 5.5.8 versions...
CVE-2026-62130: Deserialization of Untrusted Data
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency = 5.5.8 versions...
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WooCommerce Multilingual & Multicurrency versions = 5.5.8...
CVE-2026-66711
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
EUVD-2026-53914
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66711
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66711 WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66711
CVE-2026-66711 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress plugin WooCommerce Multilingual & Multicurrency, affecting versions up to and including 5.5.6. The connected documents confirm the affected product and the XSS vulnerability type but do not provide technical explo...
PT-2026-68604
Name of the Vulnerable Software and Affected Versions WooCommerce Multilingual & Multicurrency versions prior to 5.5.7 Description Cross Site Scripting XSS allows users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version newer...
CVE-2026-66711: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Coopernicus in WordPress Plugin WooCommerce Multilingual & Multicurrency versions = 5.5.6...