Exchange Rates

Exchange Rates has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Exchange Rates has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Exchange Rates is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Exchange Rates vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-58624

Exchange Rates <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Exchange Rates banner
Latestv1.4.2

Exchange Rates

falselight

Author

falselight

4.2(10)
84/100
Last Updated
2026-10-26 (2d ago)
Active Installs
800+
Downloads
150,976
Requires WP
5.6+
Requires PHP
5.6+
Tested up to
WP 7.1.3
Created
2022-07-13 (4y ago)

Exchange Rates adds currency converters, exchange-rate tables, and compact price badges to WordPress. Help visitors understand prices and calculate amounts without leaving your website. Choose from a catalog of 80+ exchange-rate sources, including central banks, commercial banks, currency exchange services, and alternative market sources. Scheduled updates retrieve rates through CurrencyRate.today using the source you select. No API key or account is required. See the converter, table, and badges in action, or watch the video walkthrough. Three ways to bring currencies into your content Currency Converter Let visitors enter an amount, choose currencies, and swap the conversion direction. A practical addition to travel guides, property listings, and websites with an international audience. Available as a widget and a shortcode. Exchange Rate Table Display selected currencies together in a configurable table. Choose the base currency, adjust the columns, and optionally let visitors enter an amount to recalculate the table. Show previous-close values and changes when your selected source supplies them. Available as a widget and a shortcode. Currency Badges Place compact currency equivalents alongside a price or amount in your content. Useful for accommodation costs, travel budgets, product descriptions, and service prices. Create badges with the shortcode generator on the plugin settings page. Choose the data source that fits your audience Different websites need different rates. Choose a central bank for its published reference rates, a commercial bank or exchange service for its quoted rates, or an alternative market source where available. Converters, tables, and badges share the same source selection. Currency coverage, availability, and publication schedules depend on that source. Source captions include a rate date and links to currency-rate information, helping visitors understand where the displayed rates come from. The complete source catalog is available in the FAQ below. Make the display your own Currencies and amounts: select the currencies and starting amounts relevant to your content. Number formatting: choose decimal precision and separator styles. Table layout: customize columns, headings, borders, and display options. Currency icons: choose rectangular, square, circular, or emoji flags, or hide flags where supported. Badge appearance: configure colors and currency labels. Flexible placement: use widgets in your theme’s widget areas or shortcodes in posts and pages. Common use cases Travel websites and blogs: help readers compare budgets and local costs. News websites and financial portals: publish a selected exchange-rate table. Property and accommodation websites: show reference amounts for international visitors. Product and service pages: display currency equivalents alongside a quoted price. Getting started Open Settings → Exchange Rates to choose your data source and review its available currencies. Add a Currency Converter or Currency Table widget under Appearance → Widgets, or insert a shortcode into a post or page. In the block editor, use a Shortcode block. The plugin settings page also includes a generator for currency badges. Support and development Need help choosing a source or configuring a display? Visit the support forum. Exchange Rates is free and open source. Follow development, report bugs, or contribute through the GitHub repository. If the plugin is useful to you, please consider leaving a review.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C