Currency Exchange for WooCommerce Security & Risk Analysis

wordpress.org/plugins/currency-exchange-for-woocommerce

With Currency Exchange for WooCommerce you can easily setup exchange to any currencies in WooCommerce.

600 active installs v3.6.2.2 PHP 7.0+ WP 5.0+ Updated Mar 12, 2026
currency-exchangepay-for-the-productproduct-currencyuse-own-currencywoocommerce-currency
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Currency Exchange for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Currency Exchange for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 22d ago
Risk Assessment

The "currency-exchange-for-woocommerce" plugin v3.6.2.2 exhibits a generally good security posture, with a notable strength in its SQL query handling, as 100% are prepared statements. The absence of known CVEs and a clean vulnerability history are also positive indicators, suggesting a history of stable and secure development.

However, the analysis reveals specific areas of concern. The presence of two AJAX handlers lacking authentication checks presents a significant attack vector. While taint analysis did not reveal any critical or high severity issues, the plugin utilizes the `unserialize` function, which can be risky if data sources are not strictly controlled and sanitized. Furthermore, a substantial portion of output (56%) is not properly escaped, creating potential for cross-site scripting (XSS) vulnerabilities.

In conclusion, while the plugin benefits from robust SQL practices and a clean vulnerability record, the unprotected AJAX endpoints and unescaped output are notable weaknesses that require attention to mitigate potential security risks.

Key Concerns

  • AJAX handlers without authentication checks
  • Unescaped output detected
  • Use of unserialize function
Vulnerabilities
None known

Currency Exchange for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Currency Exchange for WooCommerce Code Analysis

Dangerous Functions
1
Raw SQL Queries
0
0 prepared
Unescaped Output
143
113 escaped
Nonce Checks
14
Capability Checks
25
File Operations
4
External Requests
6
Bundled Libraries
0

Dangerous Functions Found

unserialize$error_log = unserialize(preg_replace('/R:\d+/', 's:18:"RECURSION DETECTED"', serialize(self::$errorberocket\includes\updater.php:128

Output Escaping

44% escaped256 total outputs
Data Flows
All sanitized

Data Flow Analysis

8 flows
<framework> (berocket\framework.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Currency Exchange for WooCommerce Attack Surface

Entry Points16
Unprotected2

AJAX Handlers 15

authwp_ajax_brfr_get_export_settingsberocket\includes\admin\import_export.php:5
authwp_ajax_brfr_set_import_settingsberocket\includes\admin\import_export.php:6
authwp_ajax_brfr_get_import_backupsberocket\includes\admin\import_export.php:7
authwp_ajax_brfr_restore_import_backupsberocket\includes\admin\import_export.php:8
authwp_ajax_berocket_admin_close_noticeberocket\includes\admin_notices.php:1199
authwp_ajax_berocket_subscribe_emailberocket\includes\admin_notices.php:1200
authwp_ajax_berocket_rate_stars_closeberocket\includes\admin_notices.php:1208
authwp_ajax_berocket_feature_request_sendberocket\includes\admin_notices.php:1209
authwp_ajax_berocket_error_notices_getberocket\includes\error_notices.php:5
authwp_ajax_berocket_information_close_noticeberocket\includes\information_notices.php:198
authwp_ajax_br_test_keyberocket\includes\updater.php:46
authwp_ajax_br_test_keysberocket\includes\updater.php:47
authwp_ajax_brcurrency_divi_moduledivi\includes\CurrencyExtension.php:12
authwp_ajax_br_ce_settings_savemain.php:99
authwp_ajax_open_exchange_loadmain.php:100

Shortcodes 1

[br_currency_exchange] main.php:101
WordPress Hooks 122
filterplugins_listberocket\framework.php:84
filterBeRocket_updater_add_pluginberocket\framework.php:105
filterberocket_admin_notices_rate_stars_pluginsberocket\framework.php:106
actioninitberocket\framework.php:107
actioninitberocket\framework.php:110
actionwp_headberocket\framework.php:111
actionwp_footerberocket\framework.php:112
actionadmin_initberocket\framework.php:113
actionadmin_menuberocket\framework.php:114
actionadmin_enqueue_scriptsberocket\framework.php:115
actionberocket_enqueue_mediaberocket\framework.php:116
filterplugin_row_metaberocket\framework.php:122
filteris_berocket_settings_pageberocket\framework.php:123
actionplugins_loadedberocket\framework.php:128
actionsanitize_comment_cookiesberocket\framework.php:129
actioninstall_plugins_pre_plugin-informationberocket\framework.php:130
filterberocket_admin_notices_subscribe_pluginsberocket\framework.php:132
filterBeRocket_admin_init_user_capabilitiesberocket\framework.php:135
filterberocket_sanitize_array_predefineberocket\framework.php:136
filterberocket_sanitize_array_ksesberocket\framework.php:137
filterberocket_sanitize_array_ksesberocket\framework.php:140
actionbefore_woocommerce_initberocket\framework.php:150
filterloop_shop_per_pageberocket\framework.php:391
actionupgrader_process_completeberocket\framework.php:499
actionadmin_footerberocket\framework.php:1158
actionwp_footerberocket\framework.php:1159
actionadmin_initberocket\framework.php:1273
actionadmin_bar_menuberocket\includes\admin\admin_bar.php:8
actionwp_footerberocket\includes\admin\admin_bar.php:9
filterberocket_admin_bar_plugins_databerocket\includes\admin\admin_bar.php:149
actionBeRocket_framework_updater_account_form_afterberocket\includes\admin\import_export.php:4
filterberocket_admin_notice_is_display_noticeberocket\includes\admin_notices.php:75
filterberocket_admin_notice_is_display_notice_priorityberocket\includes\admin_notices.php:76
actionadmin_noticesberocket\includes\admin_notices.php:1198
actionadmin_noticesberocket\includes\admin_notices.php:1207
actionberocket_rate_plugin_windowberocket\includes\admin_notices.php:1210
actionberocket_related_plugins_windowberocket\includes\admin_notices.php:1211
actionberocket_above_admin_settingsberocket\includes\admin_notices.php:1212
actionberocket_feature_request_windowberocket\includes\admin_notices.php:1213
actionadmin_footerberocket\includes\admin_notices.php:1285
actionadmin_footerberocket\includes\admin_notices.php:1493
actionadmin_footerberocket\includes\admin_notices.php:1922
actionadmin_footerberocket\includes\admin_notices.php:2079
actioninitberocket\includes\custom_post\enable_disable.php:9
actionadmin_initberocket\includes\custom_post\enable_disable.php:10
actionpost_action_enableberocket\includes\custom_post\enable_disable.php:13
actionpost_action_disableberocket\includes\custom_post\enable_disable.php:14
filterpost_classberocket\includes\custom_post\enable_disable.php:16
filterpre_get_postsberocket\includes\custom_post\enable_disable.php:18
actionpre_get_postsberocket\includes\custom_post\sortable.php:22
actionin_admin_footerberocket\includes\custom_post\sortable.php:117
actioninitberocket\includes\custom_post.php:58
filterinitberocket\includes\custom_post.php:59
filteradmin_initberocket\includes\custom_post.php:60
filterwp_insert_post_databerocket\includes\custom_post.php:61
filterBeRocket_admin_init_user_capabilitiesberocket\includes\custom_post.php:71
actionadd_meta_boxesberocket\includes\custom_post.php:128
actionsave_postberocket\includes\custom_post.php:129
filterpost_row_actionsberocket\includes\custom_post.php:130
filterlist_table_primary_columnberocket\includes\custom_post.php:131
actionadmin_enqueue_scriptsberocket\includes\custom_post.php:133
filteris_berocket_settings_pageberocket\includes\custom_post.php:135
actionadmin_footerberocket\includes\custom_post.php:162
actionadmin_noticesberocket\includes\information_notices.php:197
actionadmin_initberocket\includes\updater.php:18
filterwoocommerce_addons_sectionsberocket\includes\updater.php:27
filteris_berocket_settings_pageberocket\includes\updater.php:28
actionadmin_footerberocket\includes\updater.php:30
actionadmin_headberocket\includes\updater.php:39
actionadmin_menuberocket\includes\updater.php:40
actionadmin_menuberocket\includes\updater.php:41
actionnetwork_admin_menuberocket\includes\updater.php:42
actionadmin_initberocket\includes\updater.php:43
filterpre_set_site_transient_update_pluginsberocket\includes\updater.php:44
filterplugins_api_resultberocket\includes\updater.php:45
filterhttp_request_host_is_externalberocket\includes\updater.php:48
actionadmin_footerberocket\includes\updater.php:51
actionwp_footerberocket\includes\updater.php:52
filterberocket_display_additional_noticesberocket\includes\updater.php:92
filtercustom_menu_orderberocket\includes\updater.php:98
filterberocket_admin_notice_is_display_noticeberocket\includes\updater.php:102
filterberocket_admin_notice_is_display_notice_priorityberocket\includes\updater.php:103
filterplugins_api_resultberocket\includes\updater.php:109
actioninitberocket\includes\updater.php:1413
actionadmin_enqueue_scriptsberocket\sale\sale.php:4
filterberocket_currency_exchange_api_listincludes\rates_api.php:4
filterberocket_currency_exchange_api_getincludes\rates_api.php:5
actioninitincludes\rates_api.php:6
actionwidgets_initmain.php:98
actionshow_user_profilemain.php:103
actionedit_user_profilemain.php:104
actionpersonal_options_updatemain.php:105
actionedit_user_profile_updatemain.php:106
actionwp_loginmain.php:107
filterbapf_wc_price_argsmain.php:109
filterwoocommerce_product_get_pricemain.php:114
filterwoocommerce_product_get_regular_pricemain.php:115
filterwoocommerce_product_get_sale_pricemain.php:116
filterwoocommerce_variation_pricesmain.php:117
filterwoocommerce_product_variation_get_pricemain.php:118
filterwoocommerce_product_variation_get_regular_pricemain.php:119
filterwoocommerce_product_variation_get_sale_pricemain.php:120
filterwoocommerce_shipping_method_add_rate_argsmain.php:121
filterwoocommerce_get_pricemain.php:123
filterwoocommerce_get_regular_pricemain.php:124
filterwoocommerce_get_sale_pricemain.php:125
filterwoocommerce_get_variation_pricemain.php:126
filterwoocommerce_get_variation_regular_pricemain.php:127
filterwoocommerce_get_variation_sale_pricemain.php:128
actionwoocommerce_checkout_update_order_metamain.php:131
actionwoocommerce_currencymain.php:132
filterberocket_check_product_error_min_pricemain.php:134
filterberocket_check_product_error_max_pricemain.php:135
filterberocket_check_cart_notice_min_pricemain.php:136
filterberocket_check_cart_notice_max_pricemain.php:137
actionwoocommerce_price_filter_widget_min_amountmain.php:139
actionwoocommerce_price_filter_widget_max_amountmain.php:140
filterberocket_min_max_filtermain.php:141
filterwoocommerce_reports_get_order_report_querymain.php:142
actiondivi_extensions_initmain.php:143
filterberocket_display_additional_noticesmain.php:146
actionwoocommerce_currencymain.php:405
Maintenance & Trust

Currency Exchange for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 12, 2026
PHP min version7.0
Downloads34K

Community Trust

Rating100/100
Number of ratings29
Active installs600
Developer Profile

Currency Exchange for WooCommerce Developer Profile

BeRocket

22 plugins · 139K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
381 days
View full developer profile
Detection Fingerprints

How We Detect Currency Exchange for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/currency-exchange-for-woocommerce/includes/css/style.css/wp-content/plugins/currency-exchange-for-woocommerce/includes/js/script.js/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/css/br-ce-free-style.css/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/js/br-ce-free-script.js/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/css/br-ce-free-select2.css/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/js/br-ce-free-select2.js/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/js/br-ce-free-select2-init.js
Script Paths
/wp-content/plugins/currency-exchange-for-woocommerce/includes/js/script.js/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/js/br-ce-free-script.js/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/js/br-ce-free-select2.js/wp-content/plugins/currency-exchange-for-woocommerce/asset/free/js/br-ce-free-select2-init.js
Version Parameters
currency-exchange-for-woocommerce/includes/css/style.css?ver=currency-exchange-for-woocommerce/includes/js/script.js?ver=currency-exchange-for-woocommerce/asset/free/css/br-ce-free-style.css?ver=currency-exchange-for-woocommerce/asset/free/js/br-ce-free-script.js?ver=currency-exchange-for-woocommerce/asset/free/css/br-ce-free-select2.css?ver=currency-exchange-for-woocommerce/asset/free/js/br-ce-free-select2.js?ver=currency-exchange-for-woocommerce/asset/free/js/br-ce-free-select2-init.js?ver=

HTML / DOM Fingerprints

CSS Classes
br-ce-free-style
HTML Comments
<!-- BE ROCKET CURRENCY EXCHANGE FOR WOOCOMMERCE -->
Data Attributes
data-br-ce-currencydata-br-ce-currency-display
JS Globals
BeRocket_CE
FAQ

Frequently Asked Questions about Currency Exchange for WooCommerce