Woocommerce Currency Switcher Security Vulnerabilities and Issues — Woocommerce Currency Switcher CVE List

WoocommerceWoocommerce Currency Switcher

1 matches found

CVE•added 2021/12/06 3:55 p.m.•51 views

CVE-2021-24938

The CVE-2021-24938 vulnerability affects the WordPress WOOCS (WooCommerce Currency Switcher) plugin prior to 1.3.7.1. The issue arises because the plugin does not sanitise or escape the key parameter of the woocs_update_profiles_data AJAX action (accessible to authenticated users) before echoing ...

6.1CVSS6AI score0.00795EPSS

Web