Log in Start free

WP Swings

Products

ProductCVEsExploitedLatest
Wallet System for WooCommerce7–Jun 29, 2026
Membership For WooCommerce5–Jul 13, 2026
Upsell Order Bump Offer for WooCommerce4–Oct 29, 2026
Points and Rewards for WooCommerce3–Jan 23, 2026
PDF Generator for WordPress2–Jul 13, 2026
Coupon Referral Program2–Feb 12, 2024
Subscriptions for WooCommerce2–Jun 26, 2026
Ultimate Gift Cards For WooCommerce2–Sep 2, 2026
Gift Cards For WooCommerce Pro2–May 20, 2026
Event Tickets Manager for WooCommerce2–Jul 13, 2026
WooCommerce Ultimate Gift Card1–Feb 28, 2025
Return Refund and Exchange For WooCommerce1–Sep 10, 2026
WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet1–Jul 18, 2025

Exploited and recent CVEs

  • CVE-2026-116409 High 7.1 WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-81799 High 7.5 WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability 0.3%
  • CVE-2026-84760 Medium 5.3 WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.9 - Broken Access Control vulnerability 0.3%
  • CVE-2026-81288 High 7.1 WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57709 High 8.6 WordPress Membership For WooCommerce plugin <= 3.1.0 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2026-57407 High 7.2 WordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2026-57400 Medium 6.5 WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57332 High 7.1 WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-56061 High 7.5 WordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-49110 High 7.5 WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability 0.2%
  • CVE-2026-34898 High 7.5 WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability 0.2%
  • CVE-2026-42654 High 7.1 WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability 0.2%
  • CVE-2026-45444 Critical 10.0 WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability 0.3%
  • CVE-2026-24372 High 7.5 WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability 0.5%
  • CVE-2026-24375 Medium 5.3 WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24581 Medium 5.4 WordPress Points and Rewards for WooCommerce plugin <= 2.9.5 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68029 Medium 6.3 WordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2025-67909 High 7.5 WordPress Membership For WooCommerce plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2025-59565 Medium 6.5 WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-58978 Medium 5.3 WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-54692 High 7.5 WordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-6222 Critical 9.8 WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File Upload 0.7%
  • CVE-2025-54041 Medium 4.3 WordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-49265 High 7.5 WordPress Membership For WooCommerce plugin <= 2.8.1 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-32530 High 7.1 WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-39579 Medium 6.5 WordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2024-8425 Critical 9.8 WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload 4.1%
  • CVE-2024-11423 High 7.5 Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch 0.8%
  • CVE-2024-38699 High 7.5 WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability 0.4%
  • CVE-2024-32446 Medium 5.4 WordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerability 0.2%