Skip to content
OpenAdvisories

Vendor

WP Swings

54 known vulnerabilities.

Products

Wallet System for WooCommerce 7 Ultimate Gift Cards For WooCommerce 6 Upsell Order Bump Offer for WooCommerce 5 Membership For WooCommerce 5 Subscriptions for WooCommerce 5 Return Refund and Exchange For WooCommerce 5 Points and Rewards for WooCommerce 4 WooCommerce Ultimate Gift Card 3 Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments 3 Gift Cards For WooCommerce Pro 2 PDF Generator for WordPress 2 Event Tickets Manager for WooCommerce 2 Coupon Referral Program 2 WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet 1 Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. 1 WooCommerce Ultimate Points And Rewards 1 One Click Upsell Funnel for Woocommerce 1
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Critical 9.8
    CVE-2024-8425 Public exploit Scanner template

    WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

    The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including,…

    WP Swings WooCommerce Ultimate Gift Card Web / CMS
  • Medium 5.4
    CVE-2024-13692

    Return Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference

    The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.4.5 via several functions …

    WP Swings Return Refund and Exchange For WooCommerce Web / CMS
  • Medium 5.9
    CVE-2024-13641

    Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

    The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' dir…

    WP Swings Return Refund and Exchange For WooCommerce Web / CMS
  • High 7.5
    CVE-2024-11423 Public exploit

    Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch

    The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and Use Advance Coupons With Personalized Templates plugin for WordPress is vulnerable …

    WP Swings Ultimate Gift Cards For WooCommerce Gift Cards For WooCommerce Pro Web / CMS
  • Medium 6.4
    CVE-2024-11938

    One Click Upsell Funnel for WooCommerce <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via wps_wocuf_pro_yes Shortcode

    The One Click Upsell Funnel for WooCommerce – Funnel Builder for WordPress, Create WooCommerce Upsell, Post-Purchase Upsell & Cross Sell Offers that Boost Sales & Increase Profits with Sales Funnel Builder plugin for WordPress is vulnerable to Stored Cross-Si…

    WP Swings One Click Upsell Funnel for Woocommerce Web / CMS
  • High 7.1
    CVE-2024-53740

    WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a throu…

    WP Swings WooCommerce Ultimate Gift Card Web / CMS
  • High 7.5
    CVE-2024-38699

    WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability

    Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.

    WP Swings Wallet System for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2024-32446

    WordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce.This issue affects Wallet System for WooCommerce: from n/a through 2.5.9.

    WP Swings Wallet System for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2023-27608

    WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.

    WP Swings Points and Rewards for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2023-27607

    WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability

    Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.

    WP Swings Points and Rewards for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-1857

    Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure

    The Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the wps_wgm_preview_em…

    WP Swings Ultimate Gift Cards For WooCommerce Web / CMS
  • Critical 10.0
    CVE-2024-25100

    WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4.

    WP Swings Coupon Referral Program
  • High 7.5
    CVE-2023-52190

    WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2.

    WP Swings Coupon Referral Program
  • Medium 4.3
    CVE-2021-4391

    Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass

    The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the mwb_wgm_save_post() function. This makes it possible …

    WP Swings Ultimate Gift Cards For WooCommerce Web / CMS