EUVD-2024-49057

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerability in FOX Currency Switcher for WooCommerce allows arbitrary shortcode execution by attackers

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8271	14 Sep 202405:40	–	circl
CNNVD	WordPress plugin The FOX 代码注入漏洞	14 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8271	14 Sep 202402:04	–	cve
Cvelist	CVE-2024-8271 FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution	14 Sep 202402:04	–	cvelist
NVD	CVE-2024-8271	14 Sep 202403:15	–	nvd
OSV	CVE-2024-8271	14 Sep 202403:15	–	osv
Patchstack	WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.2.1 is vulnerable to Broken Access Control	16 Sep 202400:00	–	patchstack
Patchstack	WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution vulnerability	16 Sep 202407:12	–	patchstack
RedhatCVE	CVE-2024-8271	4 Feb 202522:32	–	redhatcve
Vulnrichment	CVE-2024-8271 FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution	14 Sep 202402:04	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "bec8a7e4-7bcf-376a-a79d-7bee69375f24",
        "vendor": {
          "name": "realmag777"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "21d92d32-84b3-3b3e-bc10-af72acfe45a8",
        "product": {
          "name": "FOX – Currency Switcher Professional for WooCommerce"
        },
        "product_version": "* ≤1.4.2.1"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/dec51bd6-2ffe-47b6-9423-6131395bf439
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-currency-switcher/tags/1.4.2.1/classes/woocs.php
plugins	www.plugins.trac.wordpress.org/changeset

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.3

EPSS0.01719

SSVC