cleantalk
Vulnerabilities and Security Researches

CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run smoothly on WooCommerce, eb9cbd4445dbdb71d87e267cad23356103e29c9d

Published on
Sep 13, 2021
Research Description
CURCY &#8211; Multi Currency for WooCommerce &#8211; Smoothly on WooCommerce 9.x [woo-multi-currency] < 2.1.18 WooCommerce Multi Currency <= 2.1.17 - Missing Authorization The WooCommerce Multi Currency plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.17. This makes it possible for authenticated attackers to change the price of a product to an arbitrary value.
Affected versions
max 2.1.18.
Status
vulnerable