CVE-2026-97071

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-05

Last updated on: 2026-10-06

Assigner: Patchstack

Description

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-06

Generated

2026-10-19

AI Q&A

2026-10-05

EPSS Evaluated

2026-10-18

NVD

CVE-2026-97071

EUVD

EUVD-2026-92310

Affected Vendors & Products

Vendor	Product	Version / Range
VillaTheme	CURCY	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-682	The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

Attack-Flow Graph

Executive Summary

This vulnerability is an Incorrect Calculation issue in the VillaTheme CURCY woo-multi-currency plugin. It allows integer attacks due to improper handling of numerical values, potentially leading to unexpected behavior in currency calculations.

Detection Guidance

This vulnerability is specific to the VillaTheme CURCY plugin and involves incorrect integer calculations. To detect it, check if the plugin version is 2.2.17 or earlier. Inspect the plugin files for integer overflow or underflow issues in currency conversion logic. No direct network commands are applicable as this is a web application vulnerability.

Impact Analysis

The vulnerability could allow attackers to manipulate currency values, leading to incorrect pricing, financial discrepancies, or other unintended consequences in transactions processed by the affected plugin.

Compliance Impact

This vulnerability may impact compliance with GDPR or HIPAA if it involves unauthorized data exposure or manipulation. However, the provided CVE details do not specify such effects directly. Integer attacks could potentially alter currency values or calculations, which might lead to financial discrepancies but not necessarily data breaches.

Mitigation Strategies

Update the VillaTheme CURCY woo-multi-currency plugin to the latest version, specifically beyond 2.2.17, to address the integer attacks vulnerability.

Hi! I’m here to help you understand CVE-2026-97071. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70