wpswings vulnerabilities
20 published CVEs name wpswings among the affected products.
- 20Published CVEs20 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15414
Subscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta
wpswings · Subscriptions for WooCommerce
High8.8 - CVE-2026-15397
Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action
wpswings · Subscriptions for WooCommerce
High7.2 - CVE-2026-10628
Points and Rewards for WooCommerce <= 2.10.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions
wpswings · Points and Rewards for WooCommerce
Medium4.3 - CVE-2026-1926
Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation
wpswings · Subscriptions for WooCommerce
Medium5.3 - CVE-2025-14450
Wallet System for WooCommerce <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation
wpswings · Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
Medium6.5 - CVE-2025-12881
Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read
wpswings · Return Refund and Exchange For WooCommerce
Medium5.4 - CVE-2025-12086
Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation
wpswings · Return Refund and Exchange For WooCommerce
Medium4.3 - CVE-2025-64267
WordPress WooCommerce Ultimate Points And Rewards plugin <= 2.10.2 - Sensitive Data Exposure vulnerability
WPSwings · WooCommerce Ultimate Points And Rewards
Medium4.3 - CVE-2025-47569
WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability
WPSwings · WooCommerce Ultimate Gift Card
Critical9.3 - CVE-2025-5103
Ultimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function
wpswings · Ultimate Gift Cards for WooCommerce
Medium4.9