Vulnerabilities

TI-2024-16557 CVE-2024-25100 · GHSA-v5q5-2qpm-h6j6

WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

MEDIUM 44

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00767 Published 2024-02-12 Fixed in 1.8.4 CWE-502

TI-2023-28618 CVE-2023-52190 · GHSA-5g4j-2gfr-rxr3

WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure

LOW 33

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00519 Published 2024-01-08 No fix listed CWE-200

Vulnerabilities

Filters

WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure