Vulnerabilities in WP Swings
33 resultsVexday analysis
WP Swings registra 30 CVEs conhecidas sem exploração ativa em campo, mas 9 divulgações recentes (últimos 90 dias) indicam descobertas contínuas. A fraqueza dominante é falta de autorização (CWE-862), presente em apenas 4 críticas, sugerindo risco moderado e predominantemente em controles de acesso.
CVE-2026-57400MEDIUMWordPress Event Tickets Manager for WooCommerce plugin <= 1.5.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-39579MEDIUMWordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2026-84760MEDIUMWordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-32530HIGHWordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57407HIGHWordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2026-81288HIGHWordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-24581MEDIUMWordPress Points and Rewards for WooCommerce plugin <= 2.9.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-58978MEDIUMWordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-24375MEDIUMWordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-59565MEDIUMWordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2024-32446MEDIUMWordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-68029MEDIUMWordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-54041MEDIUMWordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%