Skip to content
Sign in
5.4 Medium

CVE-2026-24581 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce points-and-rewards-for-woocommerce…

Description

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce points-and-rewards-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Points and Rewards for WooCommerce: from n/a through <= 2.9.5.

Affected products and versions

Product Affected versions Fixed in
Points and Rewards for WooCommerce 2.9 earliest → 2.9.5 No fix stated

Other CVEs of Points and Rewards for WooCommerce

The 3 CVEs of Points and Rewards for WooCommerce →
CVE-2023-27608 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and… 6.5 Medium CVE-2023-27607 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and… 5.4 Medium
Track this CVE