Plugin icon

Points and Rewards for WooCommerce

points-and-rewards-for-woocommerce

Vulnerabilities:

4

Last Updated:

September 15, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-09-21
Title
Points and Rewards for WooCommerce < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation via assign_claim_points
Fixed in
Fixed in 2.10.4
CVSS
4.3 (medium)
Published
2026-07-13
Title
Points and Rewards for WooCommerce < 2.10.1 - Unauthenticated Arbitrary User Wallet & Points Manipulation via IDOR
Fixed in
Fixed in 2.10.1
CVSS
5.9 (medium)
Published
2026-07-10
Title
Points and Rewards for WooCommerce < 2.10.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions
Fixed in
Fixed in 2.10.2
CVSS
4.3 (medium)
Published
2026-01-19
Title
Points and Rewards for WooCommerce < 2.9.6 - Missing Authorization
Fixed in
Fixed in 2.9.6
CVSS
4.3 (medium)