Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: realmag777 Component: Wordpress Currency Switcher Clear all filters
TI-2024-20182 CVE-2024-30456 · GHSA-9qr6-r6j4-qfxh

Cross-site request forgery in realmag777 WPCS

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WPCS.This issue affects WPCS: from n/a through 1.2.0.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-03-29 No fix listed CWE-352
TI-2023-28158 CVE-2023-51506 · GHSA-r92x-24fv-xvcc

WordPress WPCS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – WordPress Currency Switcher Professional allows Stored XSS.This issue affects WPCS – WordPress Curre…

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00275 Published 2024-02-01 No fix listed CWE-79
TI-2023-02389 CVE-2023-2556 · GHSA-46v6-7773-wf5f

Missing authorization in realmag777 WPCS – WordPress Currency Switcher Professional

Priority LOW 20

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the anonymous function for the wpcs_sd_delete action in ver…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00434 Published 2023-06-09 No fix listed CWE-862