Vendor

    WP Swings

    28 known vulnerabilities in products by WP Swings, 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WP Swings
    CriticalCVE-2022-4395

    Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

    		9.8
    CriticalCVE-2024-8425

    WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

    also in 1 other product

    		9.8
    CriticalCVE-2022-4047

    Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload

    		9.8
    HighCVE-2026-15414

    WPSwings Subscriptions for WooCommerce: Improper Privilege Management

    		8.8
    CriticalCVE-2024-25100

    WP Swings Coupon Referral Program: Deserialization of Untrusted Data

    also in 1 other product

    		10.0
    CriticalCVE-2025-47569

    WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-15397

    WPSwings Subscriptions for WooCommerce: Missing Authorization

    		7.2
    HighCVE-2024-11423

    Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch

    also in 1 other product

    		7.5
    MediumCVE-2022-4321

    PDF Generator for WordPress < 1.1.2 - Reflected XSS

    		6.1
    MediumCVE-2026-10628

    WPSwings Points and Rewards for WooCommerce: Missing Authorization

    		4.3
    HighCVE-2023-52190

    WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure

    also in 1 other product

    		7.5
    CriticalCVE-2023-27608

    WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability

    also in 1 other product

    		6.5
    HighCVE-2024-13641

    WPSwings Return Refund and Exchange For WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor

    		5.9
    MediumCVE-2025-14450

    Missing Authorization (CVE-2025-14450)

    		6.5
    MediumCVE-2026-1926

    WPSwings Subscriptions for WooCommerce: Missing Authorization

    		5.3
    MediumCVE-2024-11938

    WPSwings One Click Upsell Funnel for Woocommerce: Cross-site Scripting

    		6.4
    MediumCVE-2025-3743

    Upsell Funnel Builder for WooCommerce <= 3.0.0 - Unauthenticated Order Manipulation

    		5.3
    HighCVE-2024-53740

    WPSwings WooCommerce Ultimate Gift Card: Cross-site Scripting

    		7.1
    MediumCVE-2025-5103

    WPSwings Ultimate Gift Cards for WooCommerce: SQL Injection

    		4.9
    MediumCVE-2025-12881

    WPSwings Return Refund and Exchange For WooCommerce: Authorization Bypass Through User-Controlled Key

    		5.4
    MediumCVE-2024-13692

    WPSwings Return Refund and Exchange For WooCommerce: Improper Authorization

    		5.4
    MediumCVE-2021-4391

    Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass

    		4.3
    MediumCVE-2025-64267

    WPSwings WooCommerce Ultimate Points And Rewards: Exposure of Sensitive System Information to an Unauthorized Control Sphere

    		4.3
    MediumCVE-2025-12086

    WPSwings Return Refund and Exchange For WooCommerce: Authorization Bypass Through User-Controlled Key

    		4.3
    MediumCVE-2024-1857

    WPSwings Ultimate Gift Cards for WooCommerce: Missing Authorization

    		5.3

    All vulnerabilities in search

    Products

    Products by WP Swings
    Return Refund And Exchange For Woocommerce70
    Ultimate Gift Cards For Woocommerce60
    Subscriptions For Woocommerce30
    Wallet System For Woocommerce – Digital Wallet, Buy Now Pay Later (bnpl), Instant Cashback, Referral Program, Partial & Subscription Payments30
    Woocommerce Ultimate Gift Card30