Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Woocommerce Ultimate Gift Card CRITICAL 9.8
CVE-2024-8425

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_…

Fix: after 2.6.0
Fix from $2,300 2025-02-28
Return Refund And Exchange For Woocommerce MEDIUM 5.4
CVE-2024-13692

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vul…

Fix: 4.4.6+
Fix from $1,600 2025-02-14
Return Refund And Exchange For Woocommerce HIGH 7.5
CVE-2024-13641

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vul…

Fix: 4.4.6+
Fix from $1,950 2025-02-14
Points And Rewards For Woocommerce CRITICAL 9.8
CVE-2023-27608

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a t…

Fix: after 1.5.0
Fix from $2,300 2024-03-25
Coupon Referral Program CRITICAL 9.8
CVE-2024-25100

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Progr…

Fix: 1.8.4+
Fix from $2,300 2024-02-12
Coupon Referral Program HIGH 7.5
CVE-2023-52190

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Prog…

Fix: after 1.7.2
Fix from $1,950 2024-01-08
Pdf Generator For Wordpress MEDIUM 6.1
CVE-2022-4321

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting an…

Fix: 1.1.2+
Fix from $1,600 2023-02-06
Membership For Woocommerce CRITICAL 9.8
CVE-2022-4395EPSS 18%

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbi…

Fix: 2.1.7+
Fix from $2,300 2023-01-30
Return Refund And Exchange For Woocommerce CRITICAL 9.8
CVE-2022-4047EPSS 6%

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action ava…

Fix: 4.0.9+
Fix from $2,300 2022-12-26