falselight
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Exchange Rates | 2 | – | Sep 3, 2025 |
| Cryptocurrency Price Widget | 1 | – | Dec 13, 2024 |
| Currency Converter Widget ⚡ PRO | 1 | – | Dec 12, 2024 |
| FX Currency Converter | 1 | – | Dec 12, 2025 |
Exploited and recent CVEs
- CVE-2025-13963 FX Currency Converter <= 0.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2025-58624 WordPress Exchange Rates Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-30864 WordPress Exchange Rates plugin <= 1.2.2 - Broken Access Control vulnerability 0.4%
- CVE-2024-54308 WordPress Cryptocurrency Price Widget plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-11760 Currency Converter Widget ⚡ PRO <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%