CVE-2026-123461: WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability

Q: Which FOX versions are affected?

The issue affects FOX versions through 1.5.6. The available data does not identify a fixed version.

Q: What is the underlying weakness?

The vulnerability is a missing-authorization issue caused by incorrectly configured access-control security levels. This can allow access-control restrictions to be bypassed or improperly enforced.

Published Nov 7, 2026

Updated

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.6.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PluginUs.Net FOX woocommerce-currency-switcher to a version that resolves this vulnerability.
Fixed in 1.5.7

Event History

Nov 7, 2026

CVE Published

via MITRE·05:24 PM

Data Sourced

via MITRE·05:24 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which FOX versions are affected?

The issue affects FOX versions through 1.5.6. The available data does not identify a fixed version.

What is the underlying weakness?

The vulnerability is a missing-authorization issue caused by incorrectly configured access-control security levels. This can allow access-control restrictions to be bypassed or improperly enforced.

CVE-2026-123461: WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which FOX versions are affected?

What is the underlying weakness?

Company

Resources

Contact

Frequently Asked Questions

Which FOX versions are affected?

What is the underlying weakness?