Exchange Rates

Exchange Rates has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Exchange Rates has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Exchange Rates is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Exchange Rates vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-58624

Exchange Rates <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-09-03 00:00	Exchange Rates <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Exchange Rates <= 1.2.5	`CVE-2025-58624`	6.4 Medium	Muhammad Yudha - DJ	Yes
2025-03-27 00:00	Exchange Rates <= 1.2.2 - Missing Authorization Exchange Rates <= 1.2.2	`CVE-2025-30864`	4.3 Medium	Nguyen Xuan Chien	Yes

Showing 1–2 of 2 reports

Latestv1.3.2

Exchange Rates

Author

falselight

4.2(10)

84/100

Last Updated

2026-08-20 (24d ago)

Active Installs

900+

Downloads

148,187

Requires WP

5.6+

Requires PHP

5.6+

Tested up to

WP 7.1

Created

2022-07-13 (4y ago)

Simple and powerful real-time Currency Converter and Exchange Rates widgets. Perfect for blogs, e-commerce shops, travel websites, and financial portals. Includes exchange rate data from 86 central banks and sources worldwide. DEMO👀 Video Demo ▶️ 📩 Feel free, write if you will have any questions: online support ⭐️ Please, don’t forget to RATE the plugin. 🙏 This will influence future development. 🪄 FEATURES 🪄 ☑️ 200+ Currencies and Popular CryptoCurrencies; ☑️ Currency exchange rate data from 86 central banks of the world; ☑️ Including: black markets, dollar blue etc., sources; ☑️ 🔑 No API key needed; ☑️ Updates automatically (per hour by WordPress Cron); ☑️ Flexible design and settings, easy to adapt to your style; ☑️ Types of currency icons: rectangular, square, circular; ☑️ Real-time conversion; ☑️ Easy-to-use; ☑️ Free forever; ☑️ Our plugin will complement your site and keep your users engaged. Widgets Currency Converter is easy to use, simple real-time converter; ✔ Universal widget, it can be used on travel and property website/blog, as well as online stores. Currency Table is a table with exchange rates and another features. ✔ The currency rates table is mainly used by news websites, portals and financial forums. Shortcode Badge is a simple exchange rates list. ✔ An excellent shortcode that can be used in international online stores. With ease you can add a list of prices in different currencies to the product page. 🍩 Donations ℹ️ Sources: CurrencyRate 💵 CurrencyConvert.Online You may also like these plugins: Currency Converter Calculator Crypto Converter Widget Cryptocurrency Price Widget Currency Converter Widget PRO CurrencyRate.Today – Currency Blocks and Widgets Exchange Rates FX Currency Converter

View on WordPress.org