Vulnerabilities and security researches foryaycurrency yaycurrency

Oct 11, 2025

CVE, Research URL: CVE-2025-60114
Home page URL: Security reports for YayCurrency – WooCommerce Multi-Currency Switcher
Application: YayCurrency – WooCommerce Multi-Currency Switcher
Date: Sep 26, 2025
Research Description: Improper Control of Generation of Code ('Code Injection') vulnerability in YayCommerce YayCurrency allows Code Injection. This issue affects YayCurrency: from n/a through 3.2.
Affected versions: max 3.2.
Status: vulnerable

Feb 27, 2026

CVE, Research URL: CVE-2025-67994
Home page URL: Security reports for YayCurrency – WooCommerce Multi-Currency Switcher
Application: YayCurrency – WooCommerce Multi-Currency Switcher
Date: Feb 20, 2026
Research Description: Missing Authorization vulnerability in YayCommerce YayCurrency yaycurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayCurrency: from n/a through <= 3.3.
Affected versions: max 3.3.
Status: vulnerable