Vulnerabilities > Pluginus > Wordpress Currency Switcher

DATE CVE VULNERABILITY TITLE RISK
2024-02-01 CVE-2023-51506 Cross-site Scripting vulnerability in Pluginus Wordpress Currency Switcher
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – WordPress Currency Switcher Professional allows Stored XSS.This issue affects WPCS – WordPress Currency Switcher Professional: from n/a through 1.2.0.
network
low complexity
pluginus CWE-79
5.4
2023-06-09 CVE-2023-2556 Unspecified vulnerability in Pluginus Wordpress Currency Switcher
The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the anonymous function for the wpcs_sd_delete action in versions up to, and including, 1.1.9.
network
low complexity
pluginus
4.3