WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in YayCurrency – WooCommerce Multi-Currency Switcher

WooCommerce Multi-Currency made easy, powerful, and flexible.

3Reported vulnerabilities
7.2Highest CVSS score
3.3.5Latest version
8,000+Active installs

What to do now

Update YayCurrency – WooCommerce Multi-Currency Switcher to 3.3.5 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-60114 High 7.2 0.3% 3.2 and earlier 3.3.2 September 26, 2025
CVE-2026-16058 Medium 5.3 0.2% Before 3.3.5 3.3.5 August 21, 2026
CVE-2025-67994 Medium 5.3 0.3% 3.3 and earlier 3.3.1 February 9, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.