CVE-2026-9241

creationtimestamp| type| source ---|---|--- 2026-05-28 07:09:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhnw2thj2t...

CVE-2026-9241

The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 1.4.6. This is due to the getvalue function in classes/fixed/fixeduserrole.php trusting the attacker-controlled...