Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-01	CVE-2023-51506	Cross-site Scripting vulnerability in Pluginus Wordpress Currency Switcher Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – WordPress Currency Switcher Professional allows Stored XSS.This issue affects WPCS – WordPress Currency Switcher Professional: from n/a through 1.2.0. network low complexity pluginus CWE-79	5.4
2023-06-09	CVE-2023-2556	Unspecified vulnerability in Pluginus Wordpress Currency Switcher The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the anonymous function for the wpcs_sd_delete action in versions up to, and including, 1.1.9. network low complexity pluginus	4.3