Woocommerce Multi Currency

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-4379 MEDIUM POC This Month

The WooCommerce Multi Currency plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wmc_bulk_fixed_price function in versions up to, and including,. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Authentication Bypass Woocommerce Multi Currency

NVD VulDB

CVSS 3.1

6.5

EPSS

0.1%

CVE-2021-4376 MEDIUM PATCH This Month

The WooCommerce Multi Currency plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.17. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

WordPress Authentication Bypass Woocommerce Multi Currency

NVD WPScan VulDB

CVSS 3.1

4.3

EPSS

0.1%

CVE-2021-4379

EPSS 0% CVSS 6.5

MEDIUM POC This Month

WordPress Authentication Bypass Woocommerce Multi Currency

NVD VulDB

CVE-2021-4376

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

WordPress Authentication Bypass Woocommerce Multi Currency

NVD WPScan VulDB