WordPress Plugin Vulnerabilities

WooCommerce Multi Currency < 2.1.18 - Authenticated Product Price Change

Description

The plugin was vulnerable to Authenticated Product Price Change, which could allow customers to change the price of all products.

Affects Plugins

Plugin icon
woocommerce-multi-currency
Fixed in 2.1.18

References

CVE
CVE-2021-4376
URL
https://codecanyon.net/item/woocommerce-multi-currency/20948446
URL
https://blog.nintechnet.com/vulnerability-fixed-in-wordpress-woocommerce-multi-currency-plugin/

Miscellaneous

Original Researcher
NinTechNet
Submitter
Ryan
Verified
No
WPVDB ID
480125bc-bab3-45b8-9325-a4d406655a61

Timeline

Publicly Published
2021-09-13 (about 2 years ago)
Added
2021-09-13 (about 2 years ago)
Last Updated
2023-06-08 (about 11 months ago)

Other

Published
Title
Published
2023-01-30
Title
PrivateContent < 8.4.4 - Brute Force Protection Bypass
Published
2005-05-07
Title
WordPress <= 1.5.1.2 - Email Spoofing
Published
2020-05-06
Title
Elementor < 2.9.8 - SVG Sanitizer Bypass leading to Authenticated Stored XSS
Published
2014-11-04
Title
WP DB Backup < 2.3.0 - Backup Filename Brute Forcing
Published
2014-08-01
Title
WordPress 2.0 - 3.0.1 wp-includes/comment.php Bypass Spam Restrictions