CVE-2024-8271

概要

参考情報

• plugins.trac.wordpress.org/browser/woocommerce-currency-switcher/tags/1.4.2.1/classes/woocs.php · Broken Link
• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/threat-intel/vulnerabilities/id/dec51bd6-2ffe-47b6-9423-6131395bf439 · Third Party Advisory

fox - currency switcher professional for woocommerce のその他の脆弱性

• CVE-2024-30458高 8.8Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher.This issue affects WOOCS – WooCommerce C…
• CVE-2021-24566高 8.8The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.
• CVE-2023-6556中 5.4The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency opti…
• CVE-2023-49834高 8.8Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – …
• CVE-2022-4431中 5.4The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the p…