Plugin icon

FOX – Currency Switcher Professional for WooCommerce

woocommerce-currency-switcher

Vulnerabilities:

17

Last Updated:

June 5, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-05-27
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.7 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
Fixed in
Fixed in 1.4.7
CVSS
4.3 (medium)
Published
2026-05-14
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.6 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion
Fixed in
Fixed in 1.4.6
CVSS
6.5 (medium)
Published
2026-03-27
Title
FOX < 1.4.6 - Missing Authorization
Fixed in
Fixed in 1.4.6
CVSS
5.3 (medium)
Published
2026-03-23
Title
FOX < 1.4.6 - Authenticated (Shop manager+) SQL Injection
Fixed in
Fixed in 1.4.6
CVSS
4.9 (medium)
Published
2024-11-08
Title
The FOX – Currency Switcher Professional for WooCommerce < 1.4.2.3 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 1.4.2.3
CVSS
7.3 (high)
Published
2024-09-13
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 1.4.2.2
CVSS
7.3 (high)
Published
2024-08-16
Title
WOOCS – WooCommerce Currency Switcher < 1.4.2.1 - Missing Authorization
Fixed in
Fixed in 1.4.2.1
CVSS
4.3 (medium)
Published
2024-04-24
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.1.9 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 1.4.1.9
CVSS
6.5 (medium)
Published
2024-03-28
Title
WOOCS – WooCommerce Currency Switcher < 1.4.1.8 - Cross-Site Request Forgery
Fixed in
Fixed in 1.4.1.8
CVSS
4.3 (medium)
Published
2023-12-23
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.1.7 - Subscriber+ Stored XSS
Fixed in
Fixed in 1.4.1.7
CVSS
6.4 (medium)
Published
2023-12-05
Title
WOOCS – WooCommerce Currency Switcher < 1.4.1.5 - Cross-Site Request Forgery via delete_profiles_data
Fixed in
Fixed in 1.4.1.5
CVSS
5.4 (medium)
Published
2022-12-20
Title
WOOCS < 1.3.9.3 - Contributor+ Stored XSS
Fixed in
Fixed in 1.3.9.3
CVSS
6.8 (medium)
Published
2022-12-20
Title
WOOCS < 1.3.9.4 - Contributor+ Stored XSS
Fixed in
Fixed in 1.3.9.4
CVSS
6.8 (medium)
Published
2022-01-19
Title
WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.7.5
CVSS
6.1 (medium)
Published
2021-12-13
Title
WOOCS < 1.3.7.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.7.3
CVSS
7.5 (high)
Published
2021-11-08
Title
WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.7.1
CVSS
6.1 (medium)
Published
2021-07-22
Title
WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion
Fixed in
Fixed in 1.3.7
CVSS
9.9 (critical)