The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.CreditsMarc Montpas (Jetpack Scan)WPScanReferenceshttps://wpscan.com/vulnerability/a0bc4b13-53fe-462d-8306-8915196d3a5a/https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/