Lucene search

K
patchstackMarc Montpas (Automattic)PATCHSTACK:682264C6261A30AD80DBDF019EDCBB7F
HistoryJul 22, 2021 - 12:00 a.m.

WordPress WOOCS – WooCommerce Currency Switcher plugin <= 1.3.6.2 - Local File Inclusion (LFI) leading vulnerability to Remote Code Execution (RCE)

2021-07-2200:00:00
Marc Montpas (Automattic)
patchstack.com
34
wordpress
woocs
woocommerce
currency switcher
plugin
local file inclusion
remote code execution
vulnerability
update

EPSS

0.001

Percentile

19.3%

Local File Inclusion (LFI) leading vulnerability to Remote Code Execution (RCE) discovered by Marc Montpas (Automattic) in WordPress WOOCS – WooCommerce Currency Switcher plugin (versions <= 1.3.6.2).

Solution

           Update the WordPress WOOCS – WooCommerce Currency Switcher plugin to the latest available version (at least 1.3.7).

EPSS

0.001

Percentile

19.3%

Related for PATCHSTACK:682264C6261A30AD80DBDF019EDCBB7F