Read the docs

WP Swings

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

WP Swings records in CISA KEV

No WP Swings vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Return Refund And Exchange For Woocommerce 3 records HIGH Coupon Referral Program 2 records MEDIUM Ultimate Gift Cards For Woocommerce 2 records LOW Wallet System For Woocommerce 2 records LOW Mautic Integration For Woocommerce 1 record MEDIUM Membership For Woocommerce 1 record HIGH Pdf Generator For Wordpress 1 record HIGH Points And Rewards For Woocommerce 1 record MEDIUM

Records

1 record in Membership For Woocommerce · all components

TI-2022-04023 CVE-2022-4395 · GHSA-v7vm-v25x-84fh

Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

Priority HIGH 82

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17569 Published 2023-01-30 Fixed in 2.1.7
Open these records in search →