WordPress plugin
WPML Multilingual & Multicurrency for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium7
- Low0
All WPML Multilingual & Multicurrency for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.6 | Authenticated (Shop Manager+) PHP Object Injection ≤5.5.8Update to 5.6.3 | CVE-2026-62130 | |
| Medium4.9 | Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field ≤5.5.7Update to 5.5.8 | CVE-2026-120563 | |
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤5.5.6Update to 5.5.7 | CVE-2026-66711 | |
| Medium5.3 | Missing Authorization ≤5.3.8Update to 5.3.9 | CVE-2025-26888 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.3.7Update to 5.3.8 | CVE-2024-8629 | |
| Medium4.3 | Missing Authorization ≤5.3.6Update to 5.3.7 | CVE-2024-44006 | |
| Critical9.1 | Authenticated (Shop Manager+) SQL Injection ≤5.3.3.1Update to 5.3.4 | CVE-2024-32602 | |
| Medium4.3 | Missing Authorization ≤5.3.4Update to 5.3.5 | CVE-2024-30466 |
- Medium6.6Authenticated (Shop Manager+) PHP Object Injection
≤5.5.8Update to 5.6.3
- Medium4.9Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field
≤5.5.7Update to 5.5.8
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤5.5.6Update to 5.5.7
- Medium5.3Missing Authorization
≤5.3.8Update to 5.3.9
- Medium6.1Reflected Cross-Site Scripting
≤5.3.7Update to 5.3.8
- Medium4.3Missing Authorization
≤5.3.6Update to 5.3.7
- Critical9.1Authenticated (Shop Manager+) SQL Injection
≤5.3.3.1Update to 5.3.4
- Medium4.3Missing Authorization
≤5.3.4Update to 5.3.5
WPML Multilingual & Multicurrency for WooCommerce: common questions
Does WPML Multilingual & Multicurrency for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in WPML Multilingual & Multicurrency for WooCommerce: 1 critical, 7 medium. None are known to affect version null.
How do I check which version of WPML Multilingual & Multicurrency for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPML Multilingual & Multicurrency for WooCommerce vulnerability?
CVE-2026-62130, published Oct 8, 2026: WPML Multilingual & Multicurrency for WooCommerce <= 5.5.8 - Authenticated (Shop Manager+) PHP Object Injection. Severity: Medium (CVSS 6.6).
Is any WPML Multilingual & Multicurrency for WooCommerce vulnerability listed in CISA KEV?
No. None of the known WPML Multilingual & Multicurrency for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.