Lucene search
+L

701 matches found

CNNVD
CNNVD
added 2026/05/15 12:00 a.m.20 views

WordPress plugin FOX Currency Switcher Professional for WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

8.1CVSS5.7AI score0.00273EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/14 12:00 a.m.20 views

WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion vulnerability

Missing Authorization to Authenticated Contributor+ Configuration Deletion vulnerability discovered by Ren Voza in WordPress Plugin FOX versions = 1.4.5...

8.1CVSS5.8AI score0.00273EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2026/05/04 11:57 a.m.18 views

Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia

The China-based cybercrime group known as Silver Fox aka Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne has been linked to a new campaign targeting organizations in Russia and India with a new malware called ABCDoor. The activity involved using phishing emails that...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/10 7:23 p.m.18 views

CVE-2026-39497

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through = 1.4.5...

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.19 views

EUVD-2026-20164

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through = 1.4.5...

5.9AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.27 views

CVE-2026-39497

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through = 1.4.5...

7.6CVSS0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/08 9:16 a.m.21 views

CVE-2026-39501

Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through = 1.4.5...

5.3CVSS0.00291EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.35 views

CVE-2026-39501 WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through = 1.4.5...

5.3CVSS0.00291EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.6 views

CVE-2026-39501 WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through = 1.4.5...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.6 views

CVE-2026-39501

Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through = 1.4.5...

5.9AI score0.00291EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/08 8:30 a.m.21 views

CVE-2026-39501

CVE-2026-39501 is a Broken Access Control vulnerability affecting WordPress FOX plugin (woocommerce-currency-switcher) versions &lt;= 1.4.5. The root cause is Missing Authorization / incorrectly configured access control, allowing unauthorized access due to insufficient restrictions. Documents co...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.12 views

CVE-2026-39497 WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through = 1.4.5...

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.45 views

CVE-2026-39497 WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through = 1.4.5...

7.6CVSS0.00279EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.21 views

CVE-2026-39497

Summary of CVE-2026-39497 (WordPress FOX plugin

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/08 12:00 a.m.18 views

WordPress plugin FOX SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/08 12:00 a.m.22 views

WordPress plugin FOX 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/03/31 11:46 a.m.9 views

Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains

Chinese-speaking users are the target of an active campaign that uses typosquatted domains impersonating trusted software brands to deliver a previously undocumented remote access trojan named AtlasCross RAT. "The operation covers VPN clients, encrypted messengers, video conferencing tools,...

6AI score
SaveExploits0
Patchstack
Patchstack
added 2026/03/27 9:28 a.m.16 views

WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin FOX versions = 1.4.5...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.9 views

CVE-2026-31922

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Fox LMS fox-lms allows Blind SQL Injection.This issue affects Fox LMS: from n/a through = 1.0.6.3...

8.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/03/23 8:23 p.m.16 views

WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by timomangcut in WordPress Plugin FOX versions = 1.4.5...

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder