Pluginus Fox_-_currency_switcher_professional_for_woocommerce
6 CVEs affecting Pluginus Fox_-_currency_switcher_professional_for_woocommerce. Latest disclosed: 2024-09-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24566 | High | 8.8 | 2024-01-16 | The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode. |
CVE-2024-8271 | High | 7.3 | 2024-09-14 | The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and inc… |
CVE-2023-6556 | Medium | 5.4 | 2024-01-11 | The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in all versions… |
CVE-2023-49834 | Medium | 5.4 | 2023-12-17 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher P… |
CVE-2022-4431 | Medium | 5.4 | 2023-01-16 | The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could al… |
CVE-2024-30458 | Medium | 4.3 | 2024-03-29 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher.This issue affects WOOCS – WooCommerce Currency Switcher: f… |