Lucene search

PatchstackCVE-2024-30458

HistoryMar 29, 2024 - 1:15 p.m.

CVE-2024-30458

2024-03-2913:15:14

CWE-352

Patchstack

web.nvd.nist.gov

cve-2024-30458

vulnerability

woocs

woocommerce currency switcher

csrf

realmag777

nvd

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

9.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher.This issue affects WOOCS – WooCommerce Currency Switcher: from n/a through 1.4.1.7.

Affected configurations

Vulners

Node

realmag777woocs_–_woocommerce_currency_switcherRange≤1.4.1.7wordpress

VendorProductVersionCPE
realmag777woocs_–_woocommerce_currency_switcher*cpe:2.3:a:realmag777:woocs_–_woocommerce_currency_switcher:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
realmag777	woocs_–_woocommerce_currency_switcher	*	cpe:2.3:a:realmag777:woocs_–_woocommerce_currency_switcher::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woocommerce-currency-switcher",
    "product": "WOOCS – WooCommerce Currency Switcher",
    "vendor": "realmag777",
    "versions": [
      {
        "changes": [
          {
            "at": "1.4.1.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.1.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/woocommerce-currency-switcher/wordpress-fox-currency-switcher-professional-for-woocommerce-plugin-1-4-1-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

9.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-30458