CVE-2021-4376

The WooCommerce Multi Currency plugin for WordPress suffers from a security flaw that allows an authenticated attacker to manipulate product prices by altering them to any value they choose. This vulnerability, present in versions up to and including 2.1.17, stems from inadequate authorization controls, enabling attackers to exploit this weakness.

Based on public CVE data (MITRE/NVD).