CVE-2021-24566

Summary

The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.

Affected Software

Weaknesses

• CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CVE Program Container

Additional References

• https://wpscan.com/vulnerability/a0bc4b13-53fe-462d-8306-8915196d3a5a/
• https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://wpscan.com/vulnerability/a0bc4b13-53fe-462d-8306-8915196d3a5a/
• https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/

• ←Previous
• Next→