CVE-2024-8271

🗓️ 14 Sep 2024 02:04:21Reported by WordfenceType

The FOX – Currency Switcher Professional for WooCommerce plugin is vulnerable to arbitrary shortcode execution due to improper validation in versions up to 1.4.2.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-8271	14 Sep 202405:40	–	circl
CNNVD	WordPress plugin The FOX 代码注入漏洞	14 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8271 FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution	14 Sep 202402:04	–	cvelist
EUVD	EUVD-2024-49057	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8271	14 Sep 202403:15	–	nvd
Patchstack	WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.2.1 is vulnerable to Broken Access Control	16 Sep 202400:00	–	patchstack
Patchstack	WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution vulnerability	16 Sep 202407:12	–	patchstack
RedhatCVE	CVE-2024-8271	4 Feb 202522:32	–	redhatcve
Vulnrichment	CVE-2024-8271 FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution	14 Sep 202402:04	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 9, 2024 to September 15, 2024)	19 Sep 202415:42	–	wordfence

NVD

Vulners

Vulnrichment

Node

pluginus fox_-_currency_switcher_professional_for_woocommerceRange<1.4.2.2wordpress

[
  {
    "vendor": "realmag777",
    "product": "FOX – Currency Switcher Professional for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.4.2.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/dec51bd6-2ffe-47b6-9423-6131395bf439
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-currency-switcher/tags/1.4.2.1/classes/woocs.php

08 Apr 2026 17:28Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.3

EPSS0.01719

SSVC

CWE-94