Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4.
CVSS 3.1CRITICAL 10.0·Network·No auth·No interaction·EPSS 0.00767·Published 2024-02-12·Fixed in 1.8.4CWE-502
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2.