Skip to content
OpenAdvisories

Vendor

falselight

5 known vulnerabilities.

Products

Exchange Rates 2 Currency Converter Widget ⚡ PRO 1 Cryptocurrency Price Widget 1 FX Currency Converter 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-13963

    FX Currency Converter <= 0.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The FX Currency Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fxcc_convert' shortcode in all versions up to, and including, 0.2.0 due to insufficient input sanitization and output escaping on user supplied attri…

    falselight FX Currency Converter Web / CMS
  • Medium 6.5
    CVE-2025-58624

    WordPress Exchange Rates Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in falselight Exchange Rates exchange-rates allows Stored XSS.This issue affects Exchange Rates: from n/a through <= 1.2.5.

    falselight Exchange Rates
  • Medium 4.3
    CVE-2025-30864

    WordPress Exchange Rates plugin <= 1.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in falselight Exchange Rates exchange-rates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exchange Rates: from n/a through <= 1.2.2.

    falselight Exchange Rates
  • Medium 5.9
    CVE-2024-54308

    WordPress Cryptocurrency Price Widget plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in falselight Cryptocurrency Price Widget cryptocurrency-price-widget allows Stored XSS.This issue affects Cryptocurrency Price Widget: from n/a through <= 1.2.…

    falselight Cryptocurrency Price Widget
  • Medium 6.4
    CVE-2024-11760

    Currency Converter Widget ⚡ PRO <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Currency Converter Widget ⚡ PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'currency-converter-widget-pro' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output esca…

    falselight Currency Converter Widget ⚡ PRO Web / CMS