Read the docs

WP Swings

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

WP Swings records in CISA KEV

No WP Swings vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Return Refund And Exchange For Woocommerce 3 records HIGH Coupon Referral Program 2 records MEDIUM Ultimate Gift Cards For Woocommerce 2 records LOW Wallet System For Woocommerce 2 records LOW Mautic Integration For Woocommerce 1 record MEDIUM Membership For Woocommerce 1 record HIGH Pdf Generator For Wordpress 1 record HIGH Points And Rewards For Woocommerce 1 record MEDIUM

Records

1 record in Mautic Integration For Woocommerce · all components

TI-2022-04044 CVE-2022-4426 · GHSA-c2gf-h728-j378

Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF

Priority MEDIUM 53

The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00311 Published 2023-01-09 Fixed in 1.0.3
Open these records in search →