realmag777

Records143All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high56CVSS 7.0–8.9

Exploited now

realmag777 records in CISA KEV

No realmag777 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bear - Woocommerce Bulk Editor And Products Manager Professional 18 records LOW Husky - Products Filter Professional For Woocommerce 14 records HIGH Wordpress Meta Data And Taxonomies Filter 12 records HIGH Wolf - Wordpress Posts Bulk Editor And Products Manager Professional 10 records LOW Woot 7 records MEDIUM Fox - Currency Switcher Professional For Woocommerce 6 records MEDIUM Inpost Gallery 3 records HIGH Wordpress Currency Switcher 3 records LOW

Records

6 records in Fox - Currency Switcher Professional For Woocommerce · all components

TI-2022-04048 CVE-2022-4431 · GHSA-5qjc-pfh5-rxg4

WOOCS < 1.3.9.4 - Contributor+ Stored XSS

MEDIUM 58

The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00517 Published 2023-01-16 Fixed in 1.3.9.4

TI-2021-06851 CVE-2021-24566 · GHSA-j977-qqwc-8rmm

WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion

MEDIUM 43

The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01316 Published 2024-01-16 Fixed in 1.3.7 CWE-22

TI-2024-07667 CVE-2024-8271 · GHSA-83f6-495c-ff9q

FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution

LOW 39

The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.2.1.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00737 Published 2024-09-14 No fix listed CWE-94

TI-2024-20184 CVE-2024-30458 · GHSA-59hg-3x57-2mwj

Cross-site request forgery in realmag777 WOOCS – WooCommerce Currency Switcher

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher.This issue affects WOOCS – WooCommerce Currency Switcher: from n/a through 1.4.1.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-03-29 No fix listed CWE-352

TI-2023-27238 CVE-2023-49834 · GHSA-3rxf-wh5p-mpfx

WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher Professional for WooCommerce: from n/a through 1.4.1.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00254 Published 2023-12-17 No fix listed CWE-352

TI-2023-06007 CVE-2023-6556 · GHSA-jcc9-p6r7-vjxg

Cross-site scripting in realmag777 FOX – Currency Switcher Professional for WooCommerce

LOW 25

The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in all versions up to, and including, 1.4.1.5 due to insufficient input sani…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00413 Published 2024-01-11 No fix listed CWE-79

Open these records in search →