high8.8
CVE-2021-24566
The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.
Impact
The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pluginus | Fox - Currency Switcher Professional For Woocommerce | before 1.3.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/
- https://wpscan.com/vulnerability/a0bc4b13-53fe-462d-8306-8915196d3a5a/
- https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/
- https://wpscan.com/vulnerability/a0bc4b13-53fe-462d-8306-8915196d3a5a/