CVE-2021-20780

8.8 highEPSS 0.9%

High (8.8) in wp-currency wordpress currency switcher. EPSS 0.9% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-07-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wp-currency:wordpress_currency_switcher

References

https://jvn.jp/en/jp/JVN91372527/index.html
https://pluginus.net/
https://wordpress.org/plugins/currency-switcher/
https://jvn.jp/en/jp/JVN91372527/index.html
https://pluginus.net/

Check your stack JSON