Is CVE-2026-108174 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108174?

CVE-2026-108174 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-108174

Description

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4.