FOX – Currency Switcher Professional for WooCommerce

FOX – Currency Switcher Professional for WooCommerce has 18 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 18 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 5 high. 2026 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (39%). Other recurring categories include Code Injection, Missing Authorization.

Every one of the 18 issues recorded for FOX – Currency Switcher Professional for WooCommerce has a vendor fix available, so running the current release closes all known holes.

16 independent researchers contributed these findings, most of them (2) reported by István Márton. FOX – Currency Switcher Professional for WooCommerce is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

01234567891020.09.2014Today22.07.20218.8WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion CVSS 8.8 · 22.07.202108.11.20216.1WooCommerce Currency Switcher <= 1.3.7 - Reflected Cross-Site Scripting CVSS 6.1 · 08.11.202113.12.20216.1WOOCS <= 1.3.7.2 - Reflected Cross-Site Scripting CVSS 6.1 · 13.12.202119.01.20226.1WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action CVSS 6.1 · 19.01.202220.12.20226.4WOOCS <= 1.3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVSS 6.4 · 20.12.20226.4WOOCS <= 1.3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVSS 6.4 · 20.12.202205.12.20235.4WOOCS – WooCommerce Currency Switcher <= 1.4.1.4 - Cross-Site Request Forgery via delete_profiles_data CVSS 5.4 · 05.12.202323.12.20235.4FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 5.4 · 23.12.202328.03.20244.3WOOCS – WooCommerce Currency Switcher <= 1.4.1.7 - Cross-Site Request Forgery CVSS 4.3 · 28.03.202424.04.20246.5FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution CVSS 6.5 · 24.04.202416.08.20244.3WOOCS – WooCommerce Currency Switcher <= 1.4.2 - Missing Authorization CVSS 4.3 · 16.08.202413.09.20247.3FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 13.09.202408.11.20247.3The FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 08.11.202423.03.20264.9FOX <= 1.4.5 - Authenticated (Shop manager+) SQL Injection CVSS 4.9 · 23.03.202627.03.20265.3FOX <= 1.4.5 - Missing Authorization CVSS 5.3 · 27.03.202614.05.20268.1FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion CVSS 8.1 · 14.05.202627.05.20264.3FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter CVSS 4.3 · 27.05.202625.06.20267.2FOX – Currency Switcher Professional for WooCommerce <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 25.06.2026

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

18

Get automatic notifications for all FOX – Currency Switcher Professional for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2021-24566

WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion

Read the full analysis

Vulnerability Records

18 records
2026-06-25 00:00CVE-2026-57319
7.2
High
Nguyen Ba KhanhYes
2026-05-27 14:49CVE-2026-9241
4.3
Medium
Long LagonYes
2026-05-14 00:00CVE-2026-4094
8.1
High
Ren VozaYes
2026-03-27 00:00CVE-2026-39501
5.3
Medium
Que Thanh TuanYes
2026-03-23 00:00CVE-2026-39497
4.9
Medium
timomangcutYes
2024-11-08 00:00CVE-2024-10640
7.3
High
mikemyersYes
2024-09-13 13:27CVE-2024-8271
7.3
High
Arkadiusz HydzikYes
2024-08-16 00:00CVE-2024-43297
4.3
Medium
Ananda DhakalYes
2024-04-24 00:00CVE-2024-3734
6.5
Medium
stealthcopterYes
2024-03-28 00:00CVE-2024-30458
4.3
Medium
Dhabaleshwar DasYes
Showing 1–10 of 18 reports
FOX – Currency Switcher Professional for WooCommerce banner
Latestv1.5.3

FOX – Currency Switcher Professional for WooCommerce

RealMag777

Author

RealMag777

4.4(250)
88/100
Last Updated
2026-09-04 (9d ago)
Active Installs
50,000+
Downloads
2,254,912
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2014-09-20 (12y ago)
Requires Plugins
woocommerce

FOX – Currency Switcher Professional for WooCommerce (former name is WOOCS) is free WooCommerce multi currency switcher plugin for woocommerce, that allows your site visitors switch products prices currencies according to set currencies rates in the real time and pay in the selected currency (optionally). FOX is multi currency plugin that allows to add any currency to WooCommerce store. Ideal solution to make the serious WooCommerce store site in multiple currencies! FOX is woo currency tool and available as shortcode [woocs] so as the widget. List of supported currencies: 🗺 https://en.wikipedia.org/wiki/ISO_4217#Active_codes Briefly this plugin has next features: 🛒 Checkout with selected currency, 🗺 different GeoIP rules, 📈 different Fixed prices rules and amounts rules, 👥 Prices based on User Role, 🌍 Prices based on Country, 🛂 Payments rules, 📚 API. 🌐 Demo ❓ FAQ 📚 API Latest PHP 8.x.x – COMPATIBLE! FOX Currency Switcher Features: 🏞 Representation: Currency Switcher is available as a widget and works in any widgetized area, for flexibility the shortcode is also available [woocs]. You can insert shortcode [woocs] in any place of your site, even in the top menu. Also the plugin has ajaxed shortcode/widget of currency converter and ajaxed shortcode/widget of currency rates 🎨 Design: graphically Currency Switcher can be represented in 3 different ways: drop-down, flags, side switcher. For each currency it is possible to set flag. Also it is possible using in-built Smart Designer to create your own customized currency drop-down! 🛒 Checkout: the customers are allowed to pay in their selected(preferred) currency. This feature has name &#8216;Is multiple allowed’ and should be enabled in the plugin settings. 🌍 Rates: More than 7 currencies aggregators for automatic rates changing. Also admin can set rates manually if it’s necessary! Optionally admin can be noticed about currency rates changes by email. 🔄 Rates auto update: update currency rates hourly, twice daily, daily, weekly, monthly, each 5 minutes, each 15 minutes, each 30 minutes, each 45 minutes. Or you can disable it and set your own currency rates by hands! 💵 Price: set price format which fit your needs – decimals count, usual money sign or custom sign, money sign position (4 variants). You can show or hide cents for each currency optionally. For each currency you can set its own count of decimals after comma, so BTC is not the problem for this plugin 💰 Custom money signs: create and use your own money symbols you need. It is possible even use currency which not exists in the reality! 💲 Custom price formats: each currency can has its own format where price and money sign can be set on the side you want 💹 Price thousand and decimal separator: Set price separators depending of the currency or any business logic (for example country) using hooks woocs_price_thousand_sep and woocs_price_decimal_sep 🚀 Smart Designer: Allows to create multi currency drop-down switcher using convenient dashboard. You can create unlimited count of drop-downs designs for different places of your site and even insert them directly into the site code. 📊 Statistic: collect currencies switching statistic for business purposes. No any private data of customers collects, only currency, country and time of switching. Also statistic for orders currencies is there. 🔒 Currencies visibility: possibility to set currencies as Public or as Private. In private mode currency not published in switchers and user cannot set it by link through &#8216;?currency=XXX’ 🤖 You can ask help to chatGPT about the plugin using the plugin former name WOOCS, example: “How to use [[woocs]] shortcode?” 🛂 Payments rules: rules to hide/show payment gates on the checkout page depending on the current currency 🎁 Welcome currency: allows to set any price currency you want for your site visitors first visit. So if your shop currency is INR and you want let your customers on their first visit see prices converted to USD you just need to set &#8216;Welcome currency’ in FOX options. 👥 Individual prices based on User Role: gives ability to set different prices for each user role in basic currency. Very power feature for your shop customers with loyalty program 🌍 Individual GeoIP rules for each product: super feature which allows for different countries show different prices in different currencies! This functionality allows to realize WooCommerce Price Based on Country functionality 📈 Individual fixed prices rules for each product: feature which allows for each product set fixed price for each currency, in this case for the product will not be applied conversion by rate, watch video 🗺 GEO IP rules for visitors local currency detection: this feature is more targeted and allows to set currency of prices for the site visitors in their native currency when they visited the shop for the first time. Currency changes automatically according to the visitor IP, and even more – if to enable option &#8216;Checkout by GeoIP rules&#8216; your customers always will buy products in their local currency! 🚚 Fixed minimum amount for FREE delivery for each currency: allows to set minimum amount for FREE delivery as fixed value for each currency 📦 Fixed minimum amount for shipping for each currency: allows to set minimum amount for shipping as fixed value for each currency 🎫 Fixed amount for coupons for each currency: you can set different amounts in coupons of your shop for different currencies. In another way the system will calculate amounts according to the currencies rates and relatively to the basic currency 🔒 Fixed minimum and maximum coupon verification amount for each currency: for different currencies you can set different fixed verification amount instead of calculation by rates relatively to the basic currency 💸 Show approximate price: shows approximate price on the shop page and the single product page with currency of user defined by IP in the GeoIP rules tab if such rule exists. Works only with currencies rates data and NOT with fixed prices rules and geo rules. If system will define by GeoIP visitor country and visitor will switch currency – he/she always will see near the product price approximate price in his local currency. 🛒 Show approximate amount: shows approximate amount on the checkout page and on the cart page with currency of user defined by IP in the GeoIP rules tab if such rule exists. Works only with currencies rates data and NOT with fixed prices rules and geo rules. ⚙️ Compatibility with cache plugins: if your site uses any cache plugins enable option &#8216;I am using cache plugin on my site’, reset the site cache and from now your shop visitors can switch currencies without any problems! 📝 Orders keeps in currency of the deal: each order in your shop keeps in currency the customer paid, if option &#8216;Is multiple allowed’ is enabled! ℹ️ Price info icon: show info icon near the price of the products which while its under mouse hover shows prices of products in all other currencies 🔤 Shortcode [woocs_price]: allows to insert a product price (switchable) directly into shop promotion articles 💴 Prices without cents: recounts prices without cents for such currencies like JPY or TWD which by its nature have not cents. Test it for checkout after setup! 🛠️ Ability to set currency for new order which created through admin panel by hands 🧮 Ability to recount order from any currency to the basic currency in multi currency mode of the plugin 🔄 Possible to change currency according to the language: if you you using WPML or Polylang plugins in your shop and by business logic you want to set currency according to the current language it is possible with FOX API 🔗 FOX understand currency in the site link as demo.currency-switcher.com/?currency=EUR 🚫 No GET data in the link: switches currency without GET properties (?currency=USD) in the link (optionally) 🎨 Smart Designer: Interactive customization of currency drop-down. Description, Demo page. 💾 Selected currency storage: For the site admin FOX provides set of mechanisms to storage user selected currency on different hosting architectures: Session, Transient, Memcached, Redis 🖥️ Wide API: For site developer – advanced API functionality set which allows to manipulate with prices and their rates on the fly using conditional logic 👍 Easy to use for administrators and shop customers: install, set settings for couple of minutes and let your shop make more money! 🤖 FOX is chatGPT friendly plugin you can ask help to chat gpt about the plugin features using the plugin former name WOOCS, example: “How to use [woocs] shortcode?” 🔌 REST API 🌐 Compatible with WPML 🔎 Compatible with WooCommerce Products Filter 📈 Compatible with CTX Feed – WooCommerce Product Feed Generator 📅 Compatible with RnB – WooCommerce Booking & Rental Plugin 📅 Compatible with WebToffee Product Feed for WooCommerce plugin 📅 Compatible with Points and Rewards for WooCommerce by WP Swings 🔄 95% compatibility with different payment gates in multi currency mode, just try it! 🧪 We do compatibility with our special program FOX LABS 🛠️ Strong technical support which each day works with tones of code! PREMIUM FEATURES All features above Unlimited count of currencies (in the free version 2 currencies available) Get Premium version of the plugin: on the plugin site Make your site more profitable with next powerful scripts: &#9989; HUSKY – Products Filter for WooCommerce: is an extendable, flexible and robust plugin for WooCommerce that allows your site customers filter products by products categories, attributes, tags, custom taxonomies and price. Supports latest version of the WooCommerce plugin. A must have plugin for your WooCommerce powered online store! Maximum flexibility! &#9989; BEAR – Bulk Editor for WooCommerce: WordPress plugin for managing and bulk edit WooCommerce Products data in robust and flexible way! Be professionals with managing data of your woocommerce e-shop! &#9989; WooCommerce Active Products Tables: is WooCommerce plugin for displaying shop products in table format. Tables makes focus for your buyers on the things they want to get, nothing superfluous, just what the client wants, and full attention to what is offered! &#9989; WOLF – WordPress Posts Bulk Editor Professional: is WordPress plugin for managing and bulk edit WordPress posts, pages and custom post types data in robust and flexible way! Be professionals with managing data of your site! &#9989; TABLEON – WordPress Post Tables Filterable: WordPress plugin for displaying site posts and their custom post types in table format. Tables makes focus for your customers on the things they want to get, nothing superfluous, just what the client wants, and full attention to what is offered! &#9989; WPCS – WordPress Currency Switcher: is a WordPress plugin that allows to switch currencies and get their rates converted in the real time on your site! &#9989; MDTF – Meta Data Filter & Taxonomies Filter: the plugin for filtering and searching WordPress content in posts and their custom types by taxonomies and meta data fields. The plugin has very high flexibility thanks to its rich filter elements and in-built meta fields constructor! License This plugin is copyright pluginus.net &copy; 2012-2026 with GNU General Public License by realmag777. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY. See the GNU General Public License for more details.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C