6.5 Medium

CVE-2023-27608 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and…

Description

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.

Affected products and versions

Product	Affected versions	Fixed in
Points and Rewards for WooCommerce 1.5	earliest → 1.5.0	No fix stated
points_and_rewards_for_woocommerce 1.5	earliest → 1.5.0	No fix stated

The 3 CVEs of Points and Rewards for WooCommerce →

CVE-2026-24581 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce points-and-rewards-for-woocommerce… 5.4 Medium CVE-2023-27607 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and… 5.4 Medium

Do you use Points and Rewards for WooCommerce?

Track this CVE Watch Points and Rewards for WooCommerce Check my SBOMs

www.cveye.io/en/cve/CVE-2023-27608

Timeline

Published March 25, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2023-27608 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and…

Description

Affected products and versions

Other CVEs of Points and Rewards for WooCommerce