Wordpress Currency Switcher (Pluginus) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2024-07-12. Vendor: Pluginus.

CVEs of Wordpress Currency Switcher

• CVE-2024-38700 - CVSS 6.5 (medium), 2024-07-12: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in realmag777 WPCS allows Code Injection.This…
• CVE-2024-30456 - CVSS 8.8 (high), 2024-03-29: Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WPCS.This issue affects WPCS: from n/a through 1.2.0.1.
• CVE-2023-51506 - CVSS 5.5 (medium), 2024-02-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – WordPress Currency Switcher…
• CVE-2023-2556 - CVSS 4.3 (medium), 2023-06-09: The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check…