Description
The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | FOX | < 1.3.7 | 1.3.7 |
References
- https://wpscan.com/vulnerability/a0bc4b13-53fe-462d-8306-8915196d3a5a/ exploit vdb-entry technical-description
- https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/