WP Swings vulnerabilities
35 CVEs and advisories name WP Swings as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-115431WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability
- CVE-2026-116409WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-81799WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability
- CVE-2026-84760WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.9 - Broken Access Control vulnerability
- CVE-2026-81288WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57709WordPress Membership For WooCommerce plugin <= 3.1.0 - Arbitrary File Deletion vulnerability
- CVE-2026-57407WordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2026-57400WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.5 - Broken Access Control vulnerability
- CVE-2026-57332WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability
- CVE-2026-56061WordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability
- CVE-2026-49110WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability
- CVE-2026-34898WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability
- CVE-2026-42654WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability
- CVE-2026-45444WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability
- CVE-2026-24372WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability
- CVE-2026-24375WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability
- CVE-2026-24581WordPress Points and Rewards for WooCommerce plugin <= 2.9.5 - Broken Access Control vulnerability
- CVE-2025-68029WordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerability
- CVE-2025-67909WordPress Membership For WooCommerce plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2025-59565WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-58978WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability
- CVE-2025-54692WordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control Vulnerability
- CVE-2025-6222WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File Upload
- CVE-2025-54041WordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-49265WordPress Membership For WooCommerce plugin <= 2.8.1 - Broken Access Control Vulnerability
- CVE-2025-32530WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-39579WordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2024-8425WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload
- CVE-2024-11423Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch
- CVE-2024-38699WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability