WooCommerce Multilingual & Multicurrency vulnerabilities

Product

WooCommerce Multilingual & Multicurrency

by Amir Helzer · last CVE Oct 10, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 1Low 0

Severity

Exploitation

Watch

Add WooCommerce Multilingual & Multicurrency to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-44006	8.8	0%	Nov 1	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability Affected: through 5.3.6
CVE-2026-62130	7.2	0%	Oct 10	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability Affected: through 5.5.8
CVE-2026-66711	7.1	0%	Aug 6	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability Affected: through 5.5.6
CVE-2025-26888	5.3	0%	Apr 9	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability Affected: through 5.3.8