CVE-2026-108174: WordPress FOX plugin <= 1.5.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PluginUs.Net FOX woocommerce-currency-switcherto a version that resolves this vulnerability.Fixed in 1.5.5
Event History
Frequently Asked Questions
Which FOX installations are affected?
FOX woocommerce-currency-switcher installations through version 1.5.4 are affected. The available data does not identify a fixed version.
Does exploiting this issue require authentication or user interaction?
No. The vector indicates network exploitation with low complexity, no privileges required, and no user interaction required.
What is the reported security impact?
The reported impact is limited to integrity, with no reported confidentiality or availability impact. The vulnerability is classified as broken access control caused by missing authorization.