WordPress Plugin Vulnerabilities

Currency Switcher for Woocommerce < 2.11.2 - Security Restrictions Bypass

Description

The Currency Switcher for WooCommerce WordPress plugin was affected by a Security Restrictions Bypass security vulnerability.

Affects Plugins

Plugin icon
currency-switcher-woocommerce
Fixed in 2.11.2

References

CVE
CVE-2019-18668
URL
https://www.infigo.hr/en/critical-vulnerability-in-currency-switcher-for-woocommerce-n61

Miscellaneous

Original Researcher
Luka Sikic
Verified
No
WPVDB ID
e8a86f62-a695-40ee-af72-523097b61e1f

Timeline

Publicly Published
2019-10-31 (about 6 years ago)
Added
2019-11-04 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-05-24
Title
Upload Resume <= 1.2.0 - Captcha Bypass
Published
2022-03-25
Title
Safe SVG < 1.9.10 - SVG Sanitisation Bypass
Published
2023-03-06
Title
Formidable Forms < 6.1 - IP Spoofing
Published
2020-01-21
Title
WordPress <= 5.2.3 - Hardening Bypass
Published
2019-08-27
Title
WP Private Content Plus < 2.0 - Unauthenticated Options Change