What this plugin does

• Slug: woocommerce-currency-switcher
• Author: RealMag777
• 50000+ active installs
• 88/100 rating (250 reviews on wordpress.org)
• 2230723 all-time downloads
• On WordPress.org since 2014-09-20

convertercurrencycurrency switcherswitcherwoocommerce

Maintenance status

• Latest known version: 1.5.1
• Last updated: 2026-07-27 10:06am GMT
• Tested up to WordPress: 7.0.4
• Requires PHP: 7.4+

Known vulnerabilities

17 known CVEs on file for FOX – Currency Switcher Professional for WooCommerce. Reported between 2021 and 2026.

+ 10 more known vulnerabilities

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2024-3734	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.4.1.9	Improper Control of Generation of Code ('Code Injection')	Medium 6.5	< 1.4.1.9	1.4.1.9	2024-04-24	✓ fixed in latest
CVE-2024-30458	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.4.1.8	Cross-Site Request Forgery (CSRF)	Medium 4.3	< 1.4.1.8	1.4.1.8	2024-03-28	✓ fixed in latest
CVE-2023-6556	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.4.1.7	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Medium 5.4	< 1.4.1.7	1.4.1.7	2023-12-23	✓ fixed in latest
CVE-2023-49834	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.4.1.5	Cross-Site Request Forgery (CSRF)	Medium 5.4	< 1.4.1.5	1.4.1.5	2023-12-05	✓ fixed in latest
CVE-2022-4431	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.3.9.4	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Medium 5.4	< 1.3.9.4	1.3.9.4	2022-12-20	✓ fixed in latest
—	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.3.9.3	—	Unknown	< 1.3.9.3	1.3.9.3	2022-12-20	✓ fixed in latest
CVE-2022-0234	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.3.7.5	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Medium 6.1	< 1.3.7.5	1.3.7.5	2022-01-19	✓ fixed in latest
CVE-2021-25043	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.3.7.3	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Medium 6.1	< 1.3.7.3	1.3.7.3	2021-12-13	✓ fixed in latest
CVE-2021-24938	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.3.7.1	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Medium 6.1	< 1.3.7.1	1.3.7.1	2021-11-08	✓ fixed in latest
CVE-2021-24566	FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.3.7.1	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	High 8.8	< 1.3.7.1	1.3.7.1	2021-07-22	✓ fixed in latest

How to fix it

Keep FOX – Currency Switcher Professional for WooCommerce updated — 1.5.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

• Currency Switcher for WooCommerce — 10000+ active installs — 84/100 (43) — max PHP 8.4
• YayCurrency – WooCommerce Multi-Currency Switcher — 8000+ active installs — 96/100 (110) — max PHP 8.4
• AboveWP Bulgarian Eurozone — 2000+ active installs — 100/100 (14) — max PHP 8.4
• Custom Currency for WooCommerce — 2000+ active installs — 98/100 (9)
• Crypto Converter ⚡ Widget — 1000+ active installs — 92/100 (24)