CVE-2026-32410mediumCWE-862

CVE-2026-32410: medium-severity vulnerability in WBW Currency Switcher for WooCommerce

WordPress WBW Currency Switcher for WooCommerce plugin <= 2.2.5 - Broken Access Control vulnerability

Published 13 Mar 2026 · Updated 29 Apr 2026

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.3%

exploitation probability

0.3%top 84% of all CVEs

observed exploitation

nono source reports it

Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through <= 2.2.5.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

WBW Plugins · WBW Currency Switcher for WooCommerce

References

https://patchstack.com/database/Wordpress/Plugin/woo-currency/vulnerability/wordpress-wbw-currency-switcher-for-woocommerce-plugin-2-2-5-broken-access-control-vulnerability?_s_id=cve