Login Request a demo
WP
Vendor
wpswings
14 products with CVEs on record
28
CVEs
0
On KEV
0
New 30D
Products
RR
Return Refund and Exchange For WooCommerce
wpswings
9.8
5 CVEs0 on KEV0 new
SF
Subscriptions for WooCommerce
wpswings
8.8
3 CVEs0 on KEV0 new
UG
Ultimate Gift Cards for WooCommerce
wpswings
7.5
3 CVEs0 on KEV0 new
WS
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
wpswings
6.5
3 CVEs0 on KEV0 new
CR
Coupon Referral Program
Wpswings
9.8
2 CVEs0 on KEV0 new
PA
Points and Rewards for WooCommerce
wpswings
9.8
2 CVEs0 on KEV0 new
WS
Wallet System For Woocommerce
Wpswings
4.3
2 CVEs0 on KEV0 new
WU
WooCommerce Ultimate Gift Card
WPSwings
9.8
2 CVEs0 on KEV0 new
MI
Mautic Integration For Woocommerce
Wpswings
4.3
1 CVEs0 on KEV0 new
MF
Membership For Woocommerce
Wpswings
9.8
1 CVEs0 on KEV0 new
OC
One Click Upsell Funnel for Woocommerce
wpswings
6.4
1 CVEs0 on KEV0 new
PG
Pdf Generator For Wordpress
Wpswings
6.1
1 CVEs0 on KEV0 new
UF
Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups.
wpswings
5.3
1 CVEs0 on KEV0 new
WU
WooCommerce Ultimate Points And Rewards
WPSwings
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-15414
SF
Subscriptions for WooCommerce
wpswings
8.8
1%
Aug 1Subscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta
CVE-2026-15397
SF
Subscriptions for WooCommerce
wpswings
7.2
1%
Jul 30Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action
CVE-2026-10628
PA
Points and Rewards for WooCommerce
wpswings
4.3
1%
Jul 11Points and Rewards for WooCommerce <= 2.10.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions
CVE-2026-1926
SF
Subscriptions for WooCommerce
wpswings
5.3
0%
Mar 18Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation
CVE-2025-14450
WS
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
wpswings
6.5
0%
Jan 17Wallet System for WooCommerce <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation
CVE-2025-12881
RR
Return Refund and Exchange For WooCommerce
wpswings
5.4
0%
Nov 21Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read
CVE-2025-12086
RR
Return Refund and Exchange For WooCommerce
wpswings
4.3
0%
Nov 21Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation
CVE-2025-64267
WU
WooCommerce Ultimate Points And Rewards
WPSwings
4.3
0%
Nov 13WordPress WooCommerce Ultimate Points And Rewards plugin <= 2.10.2 - Sensitive Data Exposure vulnerability
CVE-2025-47569
WU
WooCommerce Ultimate Gift Card
WPSwings
9.3
1%
Sep 9WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability
CVE-2025-5103
UG
Ultimate Gift Cards for WooCommerce
wpswings
4.9
0%
Jun 3Ultimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function
CVE-2025-3743
UF
Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups.
wpswings
5.3
0%
Apr 25Upsell Funnel Builder for WooCommerce <= 3.0.0 - Unauthenticated Order Manipulation
CVE-2024-13724
WS
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
wpswings
4.3
0%
Mar 4Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization
CVE-2024-13682
WS
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
wpswings
4.3
0%
Mar 4Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Cross-Site Request Forgery
CVE-2024-8425
WU
Woocommerce Ultimate Gift Card
Wpswings
9.8
4%
Feb 28WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload
CVE-2024-13692
RR
Return Refund and Exchange For WooCommerce
wpswings
5.4
0%
Feb 14Return Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
CVE-2024-13641
RR
Return Refund and Exchange For WooCommerce
wpswings
7.5
0%
Feb 14Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
CVE-2024-11423
UG
Ultimate Gift Cards for WooCommerce
wpswings
7.5
1%
Jan 8Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch
CVE-2024-11938
OC
One Click Upsell Funnel for Woocommerce
wpswings
6.4
0%
Dec 21One Click Upsell Funnel for WooCommerce <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via wps_wocuf_pro_yes Shortcode
CVE-2023-27608
PA
Points And Rewards For Woocommerce
Wpswings
9.8
0%
Mar 25Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0
CVE-2024-25100
CR
Coupon Referral Program
Wpswings
9.8
1%
Feb 12Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4
CVE-2023-52190
CR
Coupon Referral Program
Wpswings
7.5
1%
Jan 8Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2
CVE-2021-4391
UG
Ultimate Gift Cards For Woocommerce
Wpswings
4.3
0%
Jul 1The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1
CVE-2022-4321
PG
Pdf Generator For Wordpress
Wpswings
6.1
1%
Feb 6The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high…
CVE-2022-4395
MF
Membership For Woocommerce
Wpswings
9.8
18%
Jan 30The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious…
CVE-2022-4426
MI
Mautic Integration For Woocommerce
Wpswings
4.3
0%
Jan 9The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated…
CVE-2022-4047
RR
Return Refund And Exchange For Woocommerce
Wpswings
9.8
7%
Dec 26The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated…