Approved changes feed: RSS · Atom

cpe:2.3:a:wpwham:currency_switcher_for_woocommerce:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWpwham (79c09f44-497c-58c4-87c5-ea8cb3f7fce6)
ProductCurrency Switcher For Woocommerce (f66f7d08-9b9a-572a-ac91-d454b5bd75c7)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18668 vulnerable 2026-06-08 05:13:12.063135 Details available
An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This means that if an attacker provides a currency that does not exist and is worth less than this default, the attacker can eventually purchase an item for a significantly cheaper price.
Published: 2019-11-02T15:29:16.000Z
Updated: 2024-08-05T01:54:14.483Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.