CVE-2019-18668

The Currency Switcher addon for WooCommerce prior to version 2.11.2 contains a flaw where selecting a non-existent currency that an administrator has not configured allows the attacker to proceed with checkout while the system falls back to displaying prices in the default currency. An attacker can exploit this by choosing a non-existent currency with a lower value than the default, enabling them to complete purchases at substantially reduced prices.

Based on public CVE data (MITRE/NVD).