WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-currency-switcher
Published
2021-11-08
Title
WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site Scripting
Slug
woocommerce-currency-switcher
Published
2021-12-13
Title
WOOCS < 1.3.7.3 - Reflected Cross-Site Scripting
Slug
woocommerce-currency-switcher
Published
2022-01-19
Title
WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting
Slug
woocommerce-currency-switcher
Published
2022-12-20
Title
WOOCS < 1.3.9.3 - Contributor+ Stored XSS
Slug
woocommerce-currency-switcher
Published
2022-12-20
Title
WOOCS < 1.3.9.4 - Contributor+ Stored XSS
Slug
woocommerce-currency-switcher
Published
2023-12-05
Title
WOOCS – WooCommerce Currency Switcher < 1.4.1.5 - Cross-Site Request Forgery via delete_profiles_data
Slug
woocommerce-currency-switcher
Published
2023-12-23
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.1.7 - Subscriber+ Stored XSS
Slug
woocommerce-currency-switcher
Published
2024-03-28
Title
WOOCS – WooCommerce Currency Switcher < 1.4.1.8 - Cross-Site Request Forgery
Slug
woocommerce-currency-switcher
Published
2024-04-24
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.1.9 - Unauthenticated Arbitrary Shortcode Execution
Slug
woocommerce-currency-switcher
Published
2024-08-16
Title
WOOCS – WooCommerce Currency Switcher < 1.4.2.1 - Missing Authorization
Slug
woocommerce-currency-switcher
Published
2024-09-13
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
woocommerce-currency-switcher
Published
2024-11-08
Title
The FOX – Currency Switcher Professional for WooCommerce < 1.4.2.3 - Unauthenticated Arbitrary Shortcode Execution
Slug
woocommerce-currency-switcher
Published
2026-03-27
Title
FOX < 1.4.6 - Missing Authorization
Slug
woocommerce-currency-switcher
Published
2026-03-23
Title
FOX < 1.4.6 - Authenticated (Shop manager+) SQL Injection
Slug
woocommerce-currency-switcher
Published
2026-05-14
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.6 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion
Slug
woocommerce-currency-switcher
Published
2026-05-27
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.7 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
Slug
woocommerce-currency-switcher
Published
2026-06-25
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.9 - Unauthenticated Stored Cross-Site Scripting
Slug
woocommerce-custom-product-tabs-lite
Published
2025-01-24
Title
Custom Product Tabs Lite for WooCommerce < 1.9.1 - Authenticated (Shop Manager+) PHP Object Injection
Slug
woocommerce-customers-manager
Published
2021-02-24
Title
Woocommerce Customers Manager < 26.5 - Arbitrary Account Creation/Update by Low Privilege Users
Slug
woocommerce-customers-manager
Published
2021-03-30
Title
Woocommerce Customers Manager < 26.6 - Arbitrary Account Creation/Update via CSRF
Slug
woocommerce-customers-manager
Published
2021-03-30
Title
Woocommerce Customers Manager < 26.6 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
woocommerce-customers-manager
Published
2024-03-25
Title
WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
Slug
woocommerce-customers-manager
Published
2024-04-02
Title
WooCommerce Customers Manager < 29.8 - Subscriber+ Email Disclosure
Slug
woocommerce-customers-manager
Published
2024-04-03
Title
WooCommerce Customers Manager < 29.8 - Reflected XSS
Slug
woocommerce-customers-manager
Published
2024-07-11
Title
WooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSS