Skip to content
OpenAdvisories

Vendor

Amir Helzer

6 known vulnerabilities.

Products

WooCommerce Multilingual & Multicurrency 3 WPML Multilingual & Multicurrency for WooCommerce 2 Absolute Links 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-120563

    WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field

    The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 5.5.7. This is due to insufficient input validation on the currency exchange rate parameter in the save_currency()…

    Amir Helzer WPML Multilingual & Multicurrency for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2025-26888

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Multilingual & Multicurrency: from n/a …

    Amir Helzer WooCommerce Multilingual & Multicurrency Web / CMS
  • Medium 6.1
    CVE-2024-8629

    WooCommerce Multilingual & Multicurrency with WPML <= 5.3.7 - Reflected Cross-Site Scripting

    The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.3.7. This makes it poss…

    Amir Helzer WPML Multilingual & Multicurrency for WooCommerce Web / CMS