WordPress security by component

WPCS – WordPress Currency Switcher Professional

Plugin description

WPCS – WordPress Currency Switcher Professional is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jun 09, 2023; the highest CVE/CNA score is 6.4.

Plugin slug: wordpress-currency-switcher-professional

Latest vulnerability

CVE-2023-2558: WPCS – WordPress Currency Switcher Professional: Cross-site scripting

WPCS – WordPress Currency Switcher Professional is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJun 09, 2023

Safe version guidanceSee mitigation notes

		Safe version
Jun 09, 2023	CVE-2023-2558 WPCS – WordPress Currency Switcher Professional: Cross-site scripting WPCS – WordPress Currency Switcher Professional is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVD5.4
Jun 09, 2023	CVE-2023-2557 WPCS – WordPress Currency Switcher Professional: A security weakness WPCS – WordPress Currency Switcher Professional is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVD4.3
Jun 09, 2023	CVE-2023-2555 WPCS – WordPress Currency Switcher Professional: A security weakness WPCS – WordPress Currency Switcher Professional is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVD4.3