high7.5

CVE-2026-81799

Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allows Exploiting Incorrectly Configur…

Impact

Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Return Refund and Exchange For WooCommerce: from n/a through 4.6.4.

Affected products

Vendor	Product	Affected versions
WP Swings	Return Refund And Exchange For WooCommerce	through 4.6.4
Wpswings	Return Refund And Exchange For WooCommerce	Version 0 ≤4.6.4

Weakness classification

CWE-862

References

NVD record
CVE.org record
GitHub advisory
https://patchstack.com/database/wordpress/plugin/woo-refund-and-exchange-lite/vulnerability/wordpress-return-refund-and-exchange-for-woocommerce-plugin-4-6-4-broken-access-control-vulnerability?_s_id=cve