Wpswings
28 CVEs across 18 Wpswings products. Browse Wpswings vulnerabilities, severities, and proof-of-concept exploits.
Wpswings products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15414 | High | 8.8 | 2026-08-01 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the `save_… |
CVE-2026-15397 | High | 7.2 | 2026-07-30 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to the p… |
CVE-2026-10628 | Medium | 4.3 | 2026-07-11 | The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.10.0. This is due to… |
CVE-2026-1926 | Medium | 5.3 | 2026-03-18 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `wps_sfw_adm… |
CVE-2025-14450 | Medium | 6.5 | 2026-01-17 | The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'change_wall… |
CVE-2025-12881 | Medium | 5.4 | 2025-11-21 | The Return Refund and Exchange For WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5… |
CVE-2025-12086 | Medium | 4.3 | 2025-11-21 | The Return Refund and Exchange For WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5… |
CVE-2025-64267 | Medium | 4.3 | 2025-11-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultima… |
CVE-2025-47569 | Critical | 9.3 | 2025-09-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultim… |
CVE-2025-5103 | Medium | 4.9 | 2025-06-03 | The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to boolean-based SQL Injection via the 'default_price' and 'product_id' parameters i… |
CVE-2025-3743 | Medium | 5.3 | 2025-04-25 | The Upsell Funnel Builder for WooCommerce plugin for WordPress is vulnerable to order manipulation in all versions up to, and including, 3.0.0. This is due to… |
CVE-2024-13724 | Medium | 4.3 | 2025-03-04 | The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to unauthorized ac… |
CVE-2024-13682 | Medium | 4.3 | 2025-03-04 | The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to Cross-Site Requ… |
CVE-2024-8425 | Critical | 9.8 | 2025-02-28 | The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_previe… |
CVE-2024-13692 | Medium | 5.4 | 2025-02-14 | The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to… |
CVE-2024-13641 | Medium | 5.9 | 2025-02-14 | The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to… |
CVE-2024-11423 | High | 7.5 | 2025-01-08 | The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule… |
CVE-2024-11938 | Medium | 6.4 | 2024-12-21 | The One Click Upsell Funnel for WooCommerce – Funnel Builder for WordPress, Create WooCommerce Upsell, Post-Purchase Upsell & Cross Sell Offers that Boost Sal… |
CVE-2024-53740 | High | 7.1 | 2024-12-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultim… |
CVE-2023-27608 | Medium | 6.5 | 2024-03-25 | Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5… |
CVE-2024-1857 | Medium | 5.3 | 2024-03-16 | The Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates plugin for WordPress is vulnerable to S… |
CVE-2024-25100 | Critical | 10.0 | 2024-02-12 | Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n… |
CVE-2023-52190 | High | 7.5 | 2024-01-08 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from… |
CVE-2021-4391 | Medium | 4.3 | 2023-07-01 | The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1. This is due t… |
CVE-2022-4321 | Medium | 6.1 | 2023-02-06 | The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be… |
CVE-2022-4395 | Critical | 9.8 | 2023-01-30 | The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary file… |
CVE-2022-4426 | Medium | 4.3 | 2023-01-09 | The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the optio… |
CVE-2022-4047 | Critical | 9.8 | 2022-12-26 | The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to… |