What’s Vulnerable › Products

WP Swings Points and Rewards for WooCommerce vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WP Swings Points and Rewards for WooCommerce version is affected

Latest WP Swings Points and Rewards for WooCommerce vulnerabilities

• CVE-2026-10628 — Points and Rewards for WooCommerce <= 2.10.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions (CVSS 4.3)
• CVE-2026-24581 — WordPress Points and Rewards for WooCommerce plugin <= 2.9.5 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2023-27607 — WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability (CVSS 5.4)
• CVE-2023-27608 — WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability (CVSS 9.8)