Medium · 5.3 CVE-2026-124409 EUVD-2026-125360GHSA-r7jw-9v9r-c5g3

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security…

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.21.

Affected products

Vendor	Product	Affected	Fixed
VillaTheme	CURCY	0 ≤2.2.21	—

References

https://patchstack.com/database/wordpress/plugin/woo-multi-currency/vulnerability/wordpress-curcy-plugin-2-2-21-broken-access-control-vulnerability?_s_id=cve