Vulnerabilities / WPML Multilingual & Multicurrency for WooCommerce
WPML Multilingual & Multicurrency for WooCommerce vulnerabilities
Advisories WPSec published for WPML Multilingual & Multicurrency for WooCommerce. Other sources may list more. Its attack surface: WPML Multilingual & Multicurrency for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0648 | WPML Multilingual & Multicurrency for WooCommerce <= 5.5.8 - Authenticated (Shop Manager+) SQL Injection via 'currency' Parameter | Medium 4.9 | 5.6.3 |
| 2026-10-08 | WPSEC-2026-0647 | WPML Multilingual & Multicurrency for WooCommerce <= 5.5.8 - Unauthenticated Session Fixation via Cross-Domain Session Handoff | Medium 4.2 | 5.6.3 |
| 2026-10-02 | WPSEC-2026-0230 | WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Currency Exchange Rate | Medium 4.9 | 5.5.8 |
License: CC BY 4.0