Description
WordPress Plugin WooCommerce Multi Currency-Currency Switcher is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change the price of all products. WordPress Plugin WooCommerce Multi Currency-Currency Switcher version 2.1.17 is vulnerable; prior versions are also affected.
Remediation
Update to plugin version 2.1.18 or latest
References
Related Vulnerabilities
WordPress Plugin Add Link to Facebook Cross-Site Scripting (2.3)
Oracle JRE CVE-2022-21626 Vulnerability (CVE-2022-21626)
WordPress Ultimate Member Plugin CVE-2019-10271 Vulnerability (CVE-2019-10271)
Collabtive Improper Privilege Management Vulnerability (CVE-2013-5027)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-8663)