cleantalk
Vulnerabilities and Security Researches

WooCommerce Multilingual & Multicurrency with WPML, CVE-2025-26888

CVE, Research URL

CVE-2025-26888

Home page URL

Security reports for WooCommerce Multilingual & Multicurrency with WPML

Application

WooCommerce Multilingual & Multicurrency with WPML

Published on
Apr 10, 2025
Research Description
Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.8.
Affected versions
Min -, max 5.3.9.
Status
vulnerable
Previous vulnerability researches
LearnPress Export Import – WordPress extension for LearnPress (CVE-2024-32588) , Jun 07, 2024
LearnPress Export Import – WordPress extension for LearnPress (CVE-2024-31241) , Jun 07, 2024
LearnPress Export Import – WordPress extension for LearnPress (CVE-2023-30487) , Jun 07, 2024
LearnPress Export Import – WordPress extension for LearnPress (CVE-2024-9609) , Nov 15, 2024
LearnPress – WordPress LMS Plugin (CVE-2024-11868) , Dec 11, 2024
New vulnerability
Right Click Disable OR Ban (CVE-2025-39548) , Apr 18, 2025
WP AutoKeyword (CVE-2025-32582) , Apr 18, 2025
WP Ever Accounting – Accounting for small business (CVE-2025-39593) , Apr 18, 2025
Movylo Marketing Automation (CVE-2025-32608) , Apr 18, 2025
WP Subscription Forms – The Ultimate WordPress Subscription Form Plugin (CVE-2025-39591) , Apr 18, 2025