Approved changes feed: RSS · Atom

cpe:2.3:a:realmag777:fox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRealmag777 (367987aa-9884-5ea5-b6ea-639a360f4171)
ProductFox (a66e4962-70eb-5be1-96eb-b19c84c5d7c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57319 vulnerable 2026-07-29 01:00:29.594120 WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.
Published: 2026-06-26T14:53:00.002Z
Updated: 2026-06-26T15:41:17.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39501 vulnerable 2026-06-08 08:01:16.603070 WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through <= 1.4.5.
Published: 2026-04-08T08:30:13.172Z
Updated: 2026-04-29T09:52:01.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39497 vulnerable 2026-06-08 08:01:16.601146 WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through <= 1.4.5.
Published: 2026-04-08T08:30:12.597Z
Updated: 2026-04-29T09:52:01.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.