Sploitus

4 exploited vulnerabilities in Woocs

Vulnerabilities with publicly known exploits

Vendors
WordPress
With known exploits
4
Affected Pluginus Woocs versions
< 1.3.7.5
Affected Pluginus Woocommerce Currency Switcher versions
< 1.3.7.3
Affected Woocommerce Woocommerce Currency Switcher versions
< 1.3.7.1
Affected Pluginus Fox - Currency Switcher Professional For Woocommerce versions
< 1.3.9.4

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2022-0234 1 exploit
CVSS 6.1 MEDIUM 2022-02-21FIX AVAILABLE
WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting
CVE-2021-25043 1 exploit
CVSS 6.1 MEDIUM 2022-01-10FIX AVAILABLE
WOOCS < 1.3.7.3 - Reflected Cross-Site Scripting
CVE-2021-24938 1 exploit
CVSS 6.1 MEDIUM 2021-12-06FIX AVAILABLE
WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site Scripting
CVE-2022-4431 2 exploits
CVSS 5.4 MEDIUM 2023-01-16FIX AVAILABLE
WOOCS < 1.3.9.4 - Contributor+ Stored XSSWOOCS < 1.3.9.3 - Contributor+ Stored XSS