Skip to content
Noroxi

wpswings records

16 published records for vendor wpswings.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
18.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2022-4395
    44Plan

    Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    wpswings · membership for woocommerceJan 30, 2023

  • CVE-2022-4047
    41Plan

    Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 6%

    wpswings · return refund and exchange for woocommerceDec 26, 2022

  • CVE-2024-8425
    40Plan

    WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    wpswings · woocommerce ultimate gift cardFeb 28, 2025

  • CVE-2024-25100
    39Monitor

    WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    wpswings · coupon referral programFeb 12, 2024

  • CVE-2023-27608
    39Monitor

    WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    wpswings · points and rewards for woocommerceMar 25, 2024

  • CVE-2023-52190
    30Monitor

    WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    wpswings · coupon referral programJan 8, 2024

  • CVE-2024-13641
    30Monitor

    Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

    HighCVSS 7.5No exploitEPSS 0%

    wpswings · return refund and exchange for woocommerceFeb 14, 2025

  • CVE-2024-38699
    30Monitor

    WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    wp swings · wallet system for woocommerceAug 13, 2024

  • CVE-2022-4321
    24Monitor

    PDF Generator for WordPress < 1.1.2 - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 1%

    wpswings · pdf generator for wordpressFeb 6, 2023

  • CVE-2024-13692
    21Monitor

    Return Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference

    MediumCVSS 5.4No exploitEPSS 0%

    wpswings · return refund and exchange for woocommerceFeb 14, 2025

  • CVE-2024-1857
    21Monitor

    Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthen

    MediumCVSS 5.3No exploitEPSS 0%

    wpswings · ultimate gift cards for woocommerceMar 16, 2024

  • CVE-2025-5103
    19Monitor

    Ultimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function

    MediumCVSS 4.9No exploitEPSS 0%

    wpswings · ultimate gift cards for woocommerceJun 3, 2025

  • CVE-2021-4391
    17Monitor

    Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass

    MediumCVSS 4.3No exploitEPSS 0%

    wpswings · ultimate gift cards for woocommerceJul 1, 2023

  • CVE-2022-4426
    17Monitor

    Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF

    MediumCVSS 4.3No exploitEPSS 0%

    wpswings · mautic integration for woocommerceJan 9, 2023

  • CVE-2024-13724
    17Monitor

    Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization

    MediumCVSS 4.3No exploitEPSS 0%

    wpswings · wallet system for woocommerceMar 4, 2025

  • CVE-2024-13682
    17Monitor

    Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Cross-Site Request Forgery

    MediumCVSS 4.3No exploitEPSS 0%

    wpswings · wallet system for woocommerceMar 4, 2025