realmag777 FOX – Currency Switcher Professional for WooCommerce vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Latest realmag777 FOX – Currency Switcher Professional for WooCommerce vulnerabilities

CVE-2026-9241 — FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter (CVSS 4.3)
CVE-2026-4094 — FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion (CVSS 8.1)
CVE-2024-8271 — FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
CVE-2024-3734 — FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5)
CVE-2024-30458 — WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
CVE-2021-24566 — WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion (CVSS 8.8)
CVE-2023-6556 — FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2023-49834 — WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
CVE-2022-4431 — WOOCS < 1.3.9.4 - Contributor+ Stored XSS (CVSS 5.4)