Cross-Site Request Forgery Vulnerability in WordPress Currency Switcher
CVE-2021-20780
8.8HIGH
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 7 July 2021
What is CVE-2021-20780?
A cross-site request forgery (CSRF) vulnerability exists in the WordPress Currency Switcher plugin, allowing remote attackers to manipulate authenticated sessions of administrators. By exploiting this flaw, attackers can perform unauthorized actions within the WordPress environment without user consent. Prompt updates and security measures are essential to protect your site from potential exploits.
Affected Version(s)
WPCS - WordPress Currency Switcher 1.1.6 and earlier