cleantalk
Vulnerabilities and Security Researches

YayCurrency – WooCommerce Multi-Currency Switcher, CVE-2025-60114

CVE, Research URL

CVE-2025-60114

Home page URL

Security reports for YayCurrency – WooCommerce Multi-Currency Switcher

Application

YayCurrency – WooCommerce Multi-Currency Switcher

Published on
Sep 26, 2025
Research Description
Improper Control of Generation of Code ('Code Injection') vulnerability in YayCommerce YayCurrency allows Code Injection. This issue affects YayCurrency: from n/a through 3.2.
Affected versions
max 3.2.
Status
vulnerable
Previous vulnerability researches
YayCurrency – WooCommerce Multi-Currency Switcher (CVE-2025-67994) , Feb 27, 2026
YayCurrency – WooCommerce Multi-Currency Switcher (CVE-2025-60114) , Oct 11, 2025
New vulnerability
Visual Website Collaboration, Feedback & Project Management – Atarim (CVE-2026-25019) , Feb 27, 2026
Visual Website Collaboration, Feedback & Project Management – Atarim (CVE-2025-67993) , Feb 27, 2026
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress (CVE-2026-24965) , Feb 27, 2026
Nelio AB Testing (CVE-2026-25378) , Feb 27, 2026
VK All in One Expansion Unit (CVE-2025-11737) , Feb 27, 2026