VillaTheme CURCY

• CVE-2026-121775 Medium 5.3 WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability –
• CVE-2026-122663 Medium 5.3 WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability –
• CVE-2026-97071 Medium 5.3 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability 0.2%
• CVE-2026-94171 High 7.1 WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2025-47563 Medium 5.3 WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability 0.3%
• CVE-2022-46796 Medium 6.5 WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability 0.7%
• CVE-2024-49283 High 7.1 WordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%