Vendor

    Wp Swings

    34 known vulnerabilities in products by Wp Swings, 0 of them actively exploited (CISA KEV).

    Key figures

    34

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wp Swings
    CriticalCVE-2024-8425

    WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

    also in 1 other product

    		9.8
    CriticalCVE-2025-6222

    Unrestricted Upload of File with Dangerous Type (CVE-2025-6222)

    		9.8
    HighCVE-2026-57709

    WordPress Membership For WooCommerce plugin <= 3.1.0 - Arbitrary File Deletion vulnerability

    		8.6
    CriticalCVE-2024-25100

    WP Swings Coupon Referral Program: Deserialization of Untrusted Data

    also in 1 other product

    		10.0
    HighCVE-2024-11423

    Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch

    also in 1 other product

    		7.5
    CriticalCVE-2026-45444

    WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability

    		10.0
    HighCVE-2026-81799

    WP Swings Return Refund and Exchange For WooCommerce: Missing Authorization

    		7.5
    HighCVE-2026-24372

    WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability

    		7.5
    HighCVE-2026-116409

    WP Swings Upsell Order Bump Offer for WooCommerce: Cross-site Scripting

    		7.1
    HighCVE-2026-56061

    WordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-81288

    WP Swings Upsell Order Bump Offer for WooCommerce: Cross-site Scripting

    		7.1
    HighCVE-2026-57332

    WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability

    		7.1
    HighCVE-2026-57407

    WP Swings PDF Generator for WordPress: Server-Side Request Forgery (SSRF)

    		7.2
    HighCVE-2025-67909

    WP Swings Membership For WooCommerce: Authorization Bypass Through User-Controlled Key

    		7.5
    MediumCVE-2026-57400

    WP Swings Event Tickets Manager for WooCommerce: Missing Authorization

    		6.5
    HighCVE-2026-34898

    WP Swings Event Tickets Manager for WooCommerce: Missing Authorization

    		7.5
    HighCVE-2026-49110

    WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability

    		7.5
    HighCVE-2023-52190

    WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure

    also in 1 other product

    		7.5
    MediumCVE-2026-84760

    WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.9 - Broken Access Control vulnerability

    		5.3
    HighCVE-2025-54692

    WordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control Vulnerability

    		7.5
    HighCVE-2026-42654

    WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability

    		7.1
    HighCVE-2024-38699

    WP Swings Wallet System for WooCommerce: Missing Authorization

    		7.5
    HighCVE-2025-49265

    WordPress Membership For WooCommerce plugin <= 2.8.1 - Broken Access Control Vulnerability

    		7.5
    CriticalCVE-2023-27608

    WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability

    also in 1 other product

    		6.5
    HighCVE-2025-32530

    WP Swings Wallet System for WooCommerce: Cross-site Scripting

    		7.1

    All vulnerabilities in search

    Products

    Products by Wp Swings
    Wallet System For Woocommerce70
    Membership For Woocommerce50
    Upsell Order Bump Offer For Woocommerce40
    Points And Rewards For Woocommerce30