CVE-2023-49834: WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published Dec 17, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher Professional for WooCommerce: from n/a through 1.4.1.4.
Affected Software
1 affected component
Pluginus Fox - Currency Switcher Professional For Woocommerce Wordpress<1.4.1.5
Remediation
Information
Update to 1.4.1.5 or a higher version.
Event History
Dec 17, 2023
CVE Published
via MITRE·10:38 AM
Data Sourced
via MITRE·10:38 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-49834?
CVE-2023-49834 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
2
What versions are affected by CVE-2023-49834?
CVE-2023-49834 affects the FOX – Currency Switcher Professional for WooCommerce versions up to 1.4.1.4.
3
How do I fix CVE-2023-49834?
To fix CVE-2023-49834, update the FOX – Currency Switcher Professional for WooCommerce to version 1.4.1.5 or later.
4
What type of vulnerability is CVE-2023-49834?
CVE-2023-49834 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
What can happen if CVE-2023-49834 is exploited?
If exploited, CVE-2023-49834 can allow attackers to perform actions on behalf of authenticated users without their consent.