CVE-2025-2169

creationtimestamp| type| source ---|---|--- 2025-03-11 05:36:15+00:00| published-proof-of-concept| Telegram/nGCSDP4vCltArA3VXeokA5jE1t269Apyi28mkZBPrFAwc4I 2025-03-11 07:35:34+00:00| seen| https://t.me/cvedetector/20031 2025-03-11 08:00:33+00:00| seen|...

CVE-2025-2169 WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution

The The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.0.4. This is due to the software allowing users to execute an action that does not properly validate a value before running...