7.5
High
CVE-2026-81799 Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite…
Description
Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Return Refund and Exchange For WooCommerce: from n/a through 4.6.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Return Refund and Exchange For WooCommerce 4.6 | earliest → 4.6.4 | No fix stated |