What’s Vulnerable › Products

VillaTheme CURCY vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your VillaTheme CURCY version is affected

Latest VillaTheme CURCY vulnerabilities

• CVE-2026-97071 — WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-94171 — WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-47563 — WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability (CVSS 5.3)
• CVE-2022-46796 — WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability (CVSS 6.5)
• CVE-2024-49283 — WordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-50831 — WordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)