Wp Swings vulnerabilities

Products

• Wallet System For Woocommerce 13
• Subscriptions For Woocommerce 11
• Membership For Woocommerce 7
• Points And Rewards For Woocommerce 6
• Upsell Order Bump Offer For Woocommerce 5
• Event Tickets Manager For Woocommerce 4
• Pdf Generator For Wordpress 3
• Woocommerce Ultimate Gift Card 3
• Coupon Referral Program 2
• Gift Cards For Woocommerce Pro 2
• Ultimate Gift Cards For Woocommerce 2

Newest

• unknown event tickets manager for woocommerce Event Tickets Manager for WooCommerce 1.5.4 - 1.5.9 - Unauthenticated Site-wide Event Ticket Price Manipulation CVE-2026-123129 5.3 MediumNovember 9, 2026
• unknown event tickets manager for woocommerce Event Tickets Manager for WooCommerce < 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure CVE-2026-122085 6.5 MediumNovember 8, 2026
• wp swings upsell order bump offer for woocommerce WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability CVE-2026-115431 7.1 HighNovember 6, 2026
• unknown subscriptions for woocommerce Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass CVE-2026-87856 5.3 MediumNovember 5, 2026
• wp swings upsell order bump offer for woocommerce WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-116409 7.1 HighOctober 29, 2026
• unknown wallet system for woocommerce Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR CVE-2026-108763 4.3 MediumOctober 29, 2026
• unknown wallet system for woocommerce Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount CVE-2026-93509 6.5 MediumOctober 8, 2026
• unknown wallet system for woocommerce Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOR CVE-2026-94246 6.3 MediumOctober 8, 2026
• unknown wallet system for woocommerce Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOR CVE-2026-94245 6.5 MediumOctober 8, 2026
• unknown wallet system for woocommerce Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export CVE-2026-94244 4.3 MediumOctober 8, 2026
• unknown points and rewards for woocommerce Points and Rewards for WooCommerce < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation via assign_claim_points CVE-2026-93510 4.3 MediumSeptember 23, 2026
• unknown subscriptions for woocommerce Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF CVE-2026-87860 4.3 MediumSeptember 16, 2026
• unknown subscriptions for woocommerce Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass CVE-2026-87854 5.3 MediumSeptember 16, 2026
• wp swings return refund and exchange for woocommerce WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability CVE-2026-81799 7.5 HighSeptember 10, 2026
• wp swings ultimate gift cards for woocommerce WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.9 - Broken Access Control vulnerability CVE-2026-84760 5.3 MediumSeptember 2, 2026
• wp swings upsell order bump offer for woocommerce WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-81288 7.1 HighSeptember 2, 2026
• unknown membership for woocommerce Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass CVE-2026-19709 5.3 MediumAugust 19, 2026
• unknown wallet system for woocommerce Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount CVE-2026-15045 6.5 MediumAugust 12, 2026
• unknown subscriptions for woocommerce Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token CVE-2026-15211 5.9 MediumAugust 7, 2026
• unknown subscriptions for woocommerce Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation CVE-2026-15215 8.8 HighAugust 7, 2026
• unknown subscriptions for woocommerce Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR CVE-2026-15214 4.3 MediumAugust 7, 2026
• wp swings subscriptions for woocommerce Subscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta CVE-2026-15414 8.8 HighAugust 1, 2026
• wp swings subscriptions for woocommerce Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action CVE-2026-15397 7.2 HighJuly 30, 2026
• unknown points and rewards for woocommerce Points and Rewards for WooCommerce < 2.10.1 - Unauthenticated Arbitrary User Wallet & Points Manipulation via IDOR CVE-2026-11782 5.9 MediumJuly 30, 2026
• wp swings membership for woocommerce WordPress Membership For WooCommerce plugin <= 3.1.0 - Arbitrary File Deletion vulnerability CVE-2026-57709 8.6 HighJuly 13, 2026
• wp swings pdf generator for wordpress WordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-57407 7.2 HighJuly 13, 2026
• wp swings event tickets manager for woocommerce WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.5 - Broken Access Control vulnerability CVE-2026-57400 6.5 MediumJuly 13, 2026
• wp swings points and rewards for woocommerce Points and Rewards for WooCommerce <= 2.10.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions CVE-2026-10628 4.3 MediumJuly 11, 2026
• wp swings wallet system for woocommerce WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability CVE-2026-57332 7.1 HighJune 29, 2026
• wp swings subscriptions for woocommerce WordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability CVE-2026-56061 7.5 HighJune 26, 2026
• wp swings upsell order bump offer for woocommerce WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability CVE-2026-49110 7.5 HighJune 15, 2026
• wp swings event tickets manager for woocommerce WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability CVE-2026-34898 7.5 HighJune 15, 2026
• wp swings wallet system for woocommerce WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability CVE-2026-42654 7.1 HighJune 2, 2026
• wp swings gift cards for woocommerce pro WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability CVE-2026-45444 10.0 CriticalMay 20, 2026
• wp swings subscriptions for woocommerce WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability CVE-2026-24372 7.5 HighMarch 25, 2026
• wp swings subscriptions for woocommerce Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation CVE-2026-1926 5.3 MediumMarch 18, 2026
• wp swings ultimate gift cards for woocommerce WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability CVE-2026-24375 5.3 MediumFebruary 19, 2026
• wp swings points and rewards for woocommerce WordPress Points and Rewards for WooCommerce plugin <= 2.9.5 - Broken Access Control vulnerability CVE-2026-24581 5.4 MediumJanuary 23, 2026
• wp swings wallet system for woocommerce WordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerability CVE-2025-68029 6.3 MediumJanuary 5, 2026
• wp swings membership for woocommerce WordPress Membership For WooCommerce plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-67909 7.5 HighDecember 24, 2025
• wp swings upsell order bump offer for woocommerce WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59565 6.5 MediumSeptember 22, 2025
• wp swings pdf generator for wordpress WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability CVE-2025-58978 5.3 MediumSeptember 9, 2025
• wp swings woocommerce ultimate gift card WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability CVE-2025-47569 9.3 CriticalSeptember 9, 2025
• wp swings membership for woocommerce WordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control Vulnerability CVE-2025-54692 7.5 HighAugust 14, 2025
• wp swings woocommerce refund and exchange with rma - warranty management, refund policy, manage user wallet WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File Upload CVE-2025-6222 9.8 CriticalJuly 18, 2025
• wp swings wallet system for woocommerce WordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-54041 4.3 MediumJuly 16, 2025
• wp swings membership for woocommerce WordPress Membership For WooCommerce plugin <= 2.8.1 - Broken Access Control Vulnerability CVE-2025-49265 7.5 HighJune 9, 2025
• wp swings wallet system for woocommerce WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-32530 7.1 HighApril 17, 2025
• wp swings membership for woocommerce WordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-39579 6.5 MediumApril 16, 2025
• wp swings woocommerce ultimate gift card WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload CVE-2024-8425 Public exploit 9.8 CriticalFebruary 28, 2025
• Show olderLoading…