CVE-2026-120563 | WooCommerce Multilingual & Multicurrency with WPML Plugin AJAX save_currency sql injection

November 3, 2026 Yanac

A vulnerability, which was classified as problematic, was found in WooCommerce Multilingual & Multicurrency with WPML Plugin up to 5.5.7 on WordPress. Affected by this vulnerability is the function save_currency of the component AJAX Handler. Such manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-120563. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More