TI-2026-70422 CVE-2026-62130 · GHSA-99r3-v658-r3xf
Object injection in WooCommerce Multilingual & Multicurrency plugin
Priority LOW 33
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
Amir Helzer
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Amir Helzer records in CISA KEVNo Amir Helzer vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2025-28417 CVE-2025-43833 · GHSA-mhg9-c8wr-hm8x
WordPress Absolute Links plugin <= 1.1.1 - SQL Injection vulnerability
Priority LOW 33
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issue affects Absolute Links: from n/a throu…
TI-2026-47379 CVE-2026-66711 · GHSA-wf57-jg94-8h6g
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions.
TI-2025-19759 CVE-2025-26888 · GHSA-6fj3-j83w-3ppr
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability
Priority LOW 30
Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce…
TI-2024-08005 CVE-2024-8629 · GHSA-35q7-h93f-grfr
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.7 - Reflected Cross-Site Scripting
Priority LOW 28
The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, a…
TI-2026-84146 CVE-2026-120563 · GHSA-2r9f-5mcx-5wjj
SQL injection in WPML Multilingual & Multicurrency for WooCommerce
Priority LOW 22
The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 5.5.7.