Aligned text domain with plugin slug (wc-multi-currency-switcher) and updated translation template header.
Hardened admin and AJAX flows: nonces, capability checks, and safer handling of $_GET, $_POST, $_COOKIE, and $_SERVER values.
Improved escaping and internationalization across admin views, options UI, widget, and front-end switcher markup.
Safer database usage for order currency storage and admin reports (prepared queries and validated table identifiers where applicable).
Front-end currency switch AJAX now sends a nonce; localized script data updated accordingly.
Options save hooks renamed to xsmcs_before_options_saved and xsmcs_options_saved (replace any use of legacy xs-mcs-* or wc_multi_currency_switcher_* action names if you had custom code attached).
Plugin bootstrap: license headers, Tested up to 6.9, stable tag 1.0.1, and global instance exposed as $GLOBALS[‘xsmcs_multi_currency’].
Currency form: use wp_date() for last-updated display; misc. admin UI and support form sanitization improvements.
