CVE-2021-24566: WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion
Published Jan 16, 2024
·Updated
The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.
Affected Software
1 affected component
Pluginus Fox - Currency Switcher Professional For Woocommerce Wordpress<1.3.7
Event History
Jan 16, 2024
CVE Published
via MITRE·03:48 PM
Data Sourced
via MITRE·03:48 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-24566?
CVE-2021-24566 is rated as a high severity vulnerability due to its potential for local file inclusion attacks.
2
How do I fix CVE-2021-24566?
To fix CVE-2021-24566, update the WooCommerce Currency Switcher FOX plugin to version 1.3.7 or later.
3
What type of attacks does CVE-2021-24566 expose users to?
CVE-2021-24566 exposes users to local file inclusion (LFI) attacks which can lead to data exposure.
4
Which plugin version is affected by CVE-2021-24566?
CVE-2021-24566 affects versions of the WooCommerce Currency Switcher FOX plugin prior to 1.3.7.
5
Who is the vendor for the plugin related to CVE-2021-24566?
The vendor for the plugin related to CVE-2021-24566 is Pluginus, specifically for the Fox - Currency Switcher Professional for WooCommerce.