Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wp swings compares to other vendors in security performance

View Risk Score →

WP Swings Gift Cards For WooCommerce ProWordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability

Risk 87
Severity
10
Malicious File Upload
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.

This issue affects Gift Cards For WooCommerce Pro: from n/a through 4.2.6.

First published (updated )
CVE-2026-45444

WP Swings Wallet System for WooCommerceWordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability

Risk 48
Severity
7.1
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation.

This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

First published (updated )
CVE-2026-42654

WP Swings Event Tickets Manager for WooCommerceWordPress Event Tickets Manager for WooCommerce plugin <= 1.5.5 - Broken Access Control vulnerability

Risk 40
Severity
6.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce event-tickets-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets Manager for WooCommerce: from n/a through <= 1.5.5.

First published (updated )
CVE-2026-57400

WP Swings Membership For WooCommerceWordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control Vulnerability

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Missing Authorization vulnerability in WP Swings Membership For WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Membership For WooCommerce: from n/a through 2.9.0.

1 / 2
Source: NVD

Remedy

Update the WordPress Membership For WooCommerce plugin to the latest available version (at least 3.0.0).
First published (updated )
CVE-2025-54692

WP Swings Membership For WooCommerceWordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) Vulnerability

Risk 34
Severity
6.5
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Membership For WooCommerce allows DOM-Based XSS. This issue affects Membership For WooCommerce: from n/a through 2.8.0.

1 / 2
Source: NVD

Remedy

Update the WordPress Membership For WooCommerce plugin to the latest available version (at least 2.8.1).
First published (updated )
CVE-2025-39579

WP Swings Subscriptions for WooCommerceWordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Authentication Bypass by Spoofing vulnerability in WP Swings Subscriptions for WooCommerce subscriptions-for-woocommerce allows Input Data Manipulation.This issue affects Subscriptions for WooCommerce: from n/a through <= 1.8.10.

First published (updated )
CVE-2026-24372

WP Swings Wallet System for WooCommerceWordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerability

Risk 24
Severity
5.4
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce.This issue affects Wallet System for WooCommerce: from n/a through 2.5.9.

Remedy

Update to 2.5.10 or a higher version.
First published (updated )
CVE-2024-32446

WP Swings Points and Rewards for WooCommerceWordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.

Remedy

Update to 1.6.0 or a higher version.
First published (updated )
CVE-2023-27607

WP Swings Points and Rewards for WooCommerceWordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.

Remedy

Update to 1.6.0 or a higher version.
First published (updated )
CVE-2023-27608

WP Swings Ultimate Gift Cards For WooCommerceWordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability

Risk 19
Severity
5.3
EPSS
0.02%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through <= 3.2.4.

First published (updated )
CVE-2026-24375

WP Swings Upsell Order Bump Offer for WooCommerceWordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability

Risk 46
Severity
6.5
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce allows Stored XSS. This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through 3.0.7.

1 / 2
Source: NVD

Remedy

Update the WordPress Upsell Order Bump Offer for WooCommerce plugin to the latest available version (at least 3.0.8).
First published (updated )
CVE-2025-59565

WP Swings Wallet System for WooCommerceWordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability

Risk 22
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce allows Cross Site Request Forgery. This issue affects Wallet System for WooCommerce: from n/a through 2.6.7.

1 / 2
Source: NVD

Remedy

Update the WordPress Wallet System for WooCommerce plugin to the latest available version (at least 2.6.8).
First published (updated )
CVE-2025-54041

WP Swings Wallet System for WooCommerceWordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Wallet System for WooCommerce allows Reflected XSS. This issue affects Wallet System for WooCommerce: from n/a through 2.6.5.

1 / 2
Source: NVD
First published (updated )
CVE-2025-32530

WP Swings Wallet System for WooCommerceWordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.

Remedy

Update to 2.5.14 or a higher version.
First published (updated )
CVE-2024-38699

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203