CVE-2021-24566 WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion

2024-01-1615:48:44

WPScan

www.cve.org

cve-2021-24566

woocommerce

currency switcher

lfi

vulnerability

wordpress

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the “woocs” shortcode.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "FOX",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.3.7"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]