~ / search / CVE-2026-123461

CVE-2026-123461

WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability

State: published CNA: Patchstack CVSS 3.1 5.3 Medium NVD: deferred

Description

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.6.

Affected products

VendorProductVersions
PluginUs.Net FOX ≤1.5.6

References

External links from the record. They lead to third-party sites.