All 7 CVE vulnerabilities found in CURCY, with AI-generated Chinese analysis, references, and POCs.
Vendor: VillaTheme
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-121775 | WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability CWE-862 | 5.3 | Medium | 2026-11-07 |
| CVE-2026-122663 | WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability CWE-862 | 5.3 | Medium | 2026-11-07 |
| CVE-2026-97071 | WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability CWE-682 | 5.3 | Medium | 2026-10-05 |
| CVE-2026-94171 | WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-09-30 |
| CVE-2025-47563 | WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability CWE-862 | 5.3 | Medium | 2025-05-16 |
| CVE-2022-46796 | WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability CWE-862 | 6.5 | Medium | 2024-12-13 |
| CVE-2024-49283 | WordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2024-10-17 |
All 7 known CVE vulnerabilities affecting CURCY with full Chinese analysis, references, and POCs where available.