WordSec
WordSec

FOX – Currency Switcher Professional for WooCommerce

Explore FOX – Currency Switcher Professional for WooCommerce vulnerabilities across all versions. Currently tracking 18 known vulnerabilities, including severity, impact, and patch status.

01234567891022.07.2021Today22.07.20218.8WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion CVSS 8.8 · 22.07.202108.11.20216.1WooCommerce Currency Switcher <= 1.3.7 - Reflected Cross-Site Scripting CVSS 6.1 · 08.11.202113.12.20216.1WOOCS <= 1.3.7.2 - Reflected Cross-Site Scripting CVSS 6.1 · 13.12.202119.01.20226.1WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action CVSS 6.1 · 19.01.202220.12.20226.4WOOCS <= 1.3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVSS 6.4 · 20.12.20226.4WOOCS <= 1.3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVSS 6.4 · 20.12.202205.12.20235.4WOOCS – WooCommerce Currency Switcher <= 1.4.1.4 - Cross-Site Request Forgery via delete_profiles_data CVSS 5.4 · 05.12.202323.12.20235.4FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 5.4 · 23.12.202328.03.20244.3WOOCS – WooCommerce Currency Switcher <= 1.4.1.7 - Cross-Site Request Forgery CVSS 4.3 · 28.03.202424.04.20246.5FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution CVSS 6.5 · 24.04.202416.08.20244.3WOOCS – WooCommerce Currency Switcher <= 1.4.2 - Missing Authorization CVSS 4.3 · 16.08.202413.09.20247.3FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 13.09.202408.11.20247.3The FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 08.11.202423.03.20264.9FOX <= 1.4.5 - Authenticated (Shop manager+) SQL Injection CVSS 4.9 · 23.03.202627.03.20265.3FOX <= 1.4.5 - Missing Authorization CVSS 5.3 · 27.03.202614.05.20268.1FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion CVSS 8.1 · 14.05.202627.05.20264.3FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter CVSS 4.3 · 27.05.202625.06.20267.2FOX – Currency Switcher Professional for WooCommerce <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 25.06.2026

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

18

Get automatic notifications for all FOX – Currency Switcher Professional for WooCommerce vulnerabilities before they are exploited.

Vulnerability Records

18 records
2026-06-25 00:00
FOX – Currency Switcher Professional for WooCommerce <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting
FOX
<= 1.4.8
CVE-2026-57319
7.2
High
Nguyen Ba KhanhYes
2026-05-27 14:49
FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
FOX
<= 1.4.6
CVE-2026-9241
4.3
Medium
Long LagonYes
2026-05-14 00:00
FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion
FOX
<= 1.4.5
CVE-2026-4094
8.1
High
Ren VozaYes
2026-03-27 00:00
FOX <= 1.4.5 - Missing Authorization
FOX
<= 1.4.5
CVE-2026-39501
5.3
Medium
Que Thanh TuanYes
2026-03-23 00:00
FOX <= 1.4.5 - Authenticated (Shop manager+) SQL Injection
FOX
<= 1.4.5
CVE-2026-39497
4.9
Medium
timomangcutYes
2024-11-08 00:00
The FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution
FOX
<= 1.4.2.2
CVE-2024-10640
7.3
High
mikemyersYes
2024-09-13 13:27
FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution
FOX
<= 1.4.2.1
CVE-2024-8271
7.3
High
Arkadiusz HydzikYes
2024-08-16 00:00
WOOCS – WooCommerce Currency Switcher <= 1.4.2 - Missing Authorization
FOX
<= 1.4.2
CVE-2024-43297
4.3
Medium
Ananda DhakalYes
2024-04-24 00:00
FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution
FOX
<= 1.4.1.8
CVE-2024-3734
6.5
Medium
stealthcopterYes
2024-03-28 00:00
WOOCS – WooCommerce Currency Switcher <= 1.4.1.7 - Cross-Site Request Forgery
FOX
<= 1.4.1.7
CVE-2024-30458
4.3
Medium
Dhabaleshwar DasYes
Showing 1–10 of 18 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C