wpswings vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 202511
4. 20265

Newest CVEs

• CVE-2026-15414

  Subscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta

  wpswings · Subscriptions for WooCommerce

  High8.8
• CVE-2026-15397

  Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action

  wpswings · Subscriptions for WooCommerce

  High7.2
• CVE-2026-10628

  Points and Rewards for WooCommerce <= 2.10.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions

  wpswings · Points and Rewards for WooCommerce

  Medium4.3
• CVE-2026-1926

  Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation

  wpswings · Subscriptions for WooCommerce

  Medium5.3
• CVE-2025-14450

  Wallet System for WooCommerce <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation

  wpswings · Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments

  Medium6.5
• CVE-2025-12881

  Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read

  wpswings · Return Refund and Exchange For WooCommerce

  Medium5.4
• CVE-2025-12086

  Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation

  wpswings · Return Refund and Exchange For WooCommerce

  Medium4.3
• CVE-2025-64267

  WordPress WooCommerce Ultimate Points And Rewards plugin <= 2.10.2 - Sensitive Data Exposure vulnerability

  WPSwings · WooCommerce Ultimate Points And Rewards

  Medium4.3
• CVE-2025-47569

  WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability

  WPSwings · WooCommerce Ultimate Gift Card

  Critical9.3
• CVE-2025-5103

  Ultimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function

  wpswings · Ultimate Gift Cards for WooCommerce

  Medium4.9