Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: realmag777 Component: Fox - Currency Switcher Professional For Woocommerce Clear all filters
TI-2023-06007 CVE-2023-6556 · GHSA-jcc9-p6r7-vjxg

Cross-site scripting in realmag777 FOX – Currency Switcher Professional for WooCommerce

Priority LOW 25

The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in all versions up to, and including, 1.4.1.5 due to insufficient input sani…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00413 Published 2024-01-11 No fix listed CWE-79
TI-2023-27238 CVE-2023-49834 · GHSA-3rxf-wh5p-mpfx

WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher Professional for WooCommerce: from n/a through 1.4.1.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00254 Published 2023-12-17 No fix listed CWE-352
TI-2022-04048 CVE-2022-4431 · GHSA-5qjc-pfh5-rxg4

WOOCS < 1.3.9.4 - Contributor+ Stored XSS

Priority MEDIUM 58

The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00517 Published 2023-01-16 Fixed in 1.3.9.4