Skip to content
OpenAdvisories
High · 7.5 CVE-2026-81799 EUVD-2026-75528GHSA-w59f-g372-95cg

WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability

Published Sep 10, 2026 · Updated Nov 2, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Return Refund and Exchange For WooCommerce: from n/a through 4.6.4.

Affected products

VendorProductAffectedFixed
WP Swings Return Refund and Exchange For WooCommerce ≤ 4.6.4 —

References