villatheme curcy vulnerabilities in 2024, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 6.5CVE-2022-46796EPSS 0.7%2024-12-13

   Missing Authorization vulnerability in VillaTheme CURCY allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.1.25.

2. 7.1CVE-2024-49283EPSS 0.3%2024-10-17

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY woo-multi-currency allows Reflected XSS.This issue affects CURCY: from n/a through <= 2.2.3.