Wpswings vulnerabilities
We track 9 vulnerabilities in Wpswings products across 7 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2026.
Latest Wpswings vulnerabilities
- 8.8 High severity
Subscriptions for WooCommerce: Improper Privilege Management
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the `save_meta_boxes()` function persisting the `_wps_plan_user_role` membership plan meta from `$_POST` withou
- 7.2 High severity
Subscriptions for WooCommerce: Missing Authorization
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action via the wps_sfw_install_p
- 9.3 Critical severity
WooCommerce Ultimate Gift Card: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Blind SQL Injection.This issue affects WooCommerce Ultimate Gift Card: from n/a
- 7.5 High severity
Return Refund and Exchange For WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' dire
- 7.5 High severity
Gift Cards for WooCommerce Pro: Missing Authorization
The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and Use Advance Coupons With Personalized Templates plugin for WordPress is vulnerable t
- 7.1 High severity
WooCommerce Ultimate Gift Card: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a throug
- 7.5 High severity
Wallet System for WooCommerce: Missing Authorization
Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.
- 9.8 Critical severity
Points and Rewards for WooCommerce: Missing Authorization
Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.
- 9.8 Critical severity
Coupon Referral Program: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4.