Vulnerabilities

TI-2024-21403 CVE-2024-32516 · GHSA-wqv6-3fqw-fh53

WordPress Multi Currency For WooCommerce plugin <= 1.5.5 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Currency For WooCommerce: from n/a through 1.5.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0046 Published 2024-04-17 No fix listed CWE-862

TI-2023-27244 CVE-2023-49840 · GHSA-mwjm-p6g5-rfvf

WordPress Multi Currency For WooCommerce Plugin <= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Currency For WooCommerce: from n/a through 1.5.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00261 Published 2023-12-18 No fix listed CWE-352

TI-2021-03233 CVE-2021-4376 · GHSA-7vpf-phw9-2m55

WooCommerce Multi Currency <= 2.1.17 - Missing Authorization

LOW 21

The WooCommerce Multi Currency plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.17.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00603 Published 2023-06-07 No fix listed CWE-862

Vulnerabilities

Filters

WordPress Multi Currency For WooCommerce plugin <= 1.5.5 - Broken Access Control vulnerability

WordPress Multi Currency For WooCommerce Plugin <= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

WooCommerce Multi Currency <= 2.1.17 - Missing Authorization