Threat database

CVE-2026-62130 is a high-severity vulnerability in WooCommerce Multilingual & Multicurrency versions up to 5.5.8. It involves PHP Object Injection due to deserialization of untrusted data by users with shop manager privileges. This flaw can lead to full confidentiality, integrity, and availability compromise of the affected system.

CVE-2026-66711 is a high-severity cross-site scripting (XSS) vulnerability affecting WooCommerce Multilingual & Multicurrency versions up to and including 5.5.6. The flaw involves improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. This vulnerability requires user interaction (UI:R) but does not require privileges (PR:N) and can impact confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.

Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through <= 5.3.8.

Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through <= 5.3.6.