WP Swings

Records58All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

WP Swings records in CISA KEV

No WP Swings vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Return Refund And Exchange For Woocommerce 3 records HIGH Coupon Referral Program 2 records MEDIUM Ultimate Gift Cards For Woocommerce 2 records LOW Wallet System For Woocommerce 2 records LOW Mautic Integration For Woocommerce 1 record MEDIUM Membership For Woocommerce 1 record HIGH Pdf Generator For Wordpress 1 record HIGH Points And Rewards For Woocommerce 1 record MEDIUM

Records

2 records in Ultimate Gift Cards For Woocommerce · all components

TI-2025-04574 CVE-2025-5103 · GHSA-gh3g-9366-jh5q

SQL injection in WP Swings Ultimate Gift Cards for WooCommerce

LOW 23

The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to boolean-based SQL Injection via the 'default_price' and 'product_id' parameters in all versions up to, and including, 3.1.4 due to insufficien…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00396 Published 2025-06-03 No fix listed CWE-89

TI-2021-03248 CVE-2021-4391 · GHSA-f3xx-5374-9242

Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass

LOW 21

The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-07-01 No fix listed CWE-352

Open these records in search →

Critical	8
High	23
Medium	27
Low	0
No CVSS	0