Unscored CVE-2021-20780 EUVD-2021-8192GHSA-8c26-prw3-x6w4

Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack t…

Published Jul 7, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: RealMag777 Product: WPCS - WordPress Currency Switcher Category: Web / CMS

Description

Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
realmag777	WPCS - WordPress Currency Switcher	1.1.6 and earlier	—

References

https://wordpress.org/plugins/currency-switcher/
https://pluginus.net/
https://jvn.jp/en/jp/JVN91372527/index.html