CVE-2026-97071

MediumCVSS 5.3

Published: 05/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 05/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

7th percentile - higher than 7% of all known CVEs

Summary

An Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks. This issue affects CURCY from n/a through 2.2.17.

Risk Assessment

Integer attacks can lead to incorrect currency conversions, potentially causing financial losses or price manipulation in the store.

Recommendation

It is recommended to update the CURCY plugin to the latest version that includes security fixes.

Other vulnerabilities in CURCY woo-multi-currency

CVE-2026-94171High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY woo-multi-currency allows DOM-Based XSS. This issue affects CURCY: 2.2.18.

Original NVD description (English source)

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS