CVE-2021-4376: WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Published Jun 7, 2023
·Updated
The WooCommerce Multi Currency plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.17. This makes it possible for authenticated attackers to change the price of a product to an arbitrary value.
Affected Software
1 affected component
Palscode Woocommerce Multi Currency Wordpress<=2.1.17
Remediation
Event History
Jun 7, 2023
CVE Published
via MITRE·01:51 AM
Data Sourced
via MITRE·01:51 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-4376?
The severity of CVE-2021-4376 is rated as medium with a CVSS score of 4.3.
2
How can I exploit CVE-2021-4376?
Authenticated attackers can exploit CVE-2021-4376 to change the price of a product to an arbitrary value.
3
Is WooCommerce Multi Currency plugin version 2.1.17 affected by CVE-2021-4376?
Yes, WooCommerce Multi Currency plugin version up to and including 2.1.17 is affected by CVE-2021-4376.