VillaTheme CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x

• CVE-2026-11778 Medium 5.4 CURCY <= 2.2.14 - Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter 0.4%
• CVE-2024-13487 High 7.3 CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function 0.7%
• CVE-2021-4376 Medium 4.3 WooCommerce Multi Currency <= 2.1.17 - Missing Authorization 0.6%