8.8
High
CVE-2021-24566 The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs"…
Description
The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FOX 1.3 | earliest → < 1.3.7 | 1.3.7 |