Plugin icon

Return Refund and Exchange For WooCommerce

woo-refund-and-exchange-lite

Vulnerabilities:

5

Last Updated:

May 1, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2025-11-20
Title
Return Refund and Exchange For WooCommerce < 4.5.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation
Fixed in
Fixed in 4.5.6
CVSS
4.3 (medium)
Published
2025-11-20
Title
Return Refund and Exchange For WooCommerce < 4.5.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read
Fixed in
Fixed in 4.5.6
CVSS
5.4 (medium)
Published
2025-02-13
Title
Return Refund and Exchange For WooCommerce < 4.4.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Fixed in
Fixed in 4.4.6
CVSS
5.9 (medium)
Published
2025-02-13
Title
Return Refund and Exchange For WooCommerce < 4.4.6 - Subscriber+ IDOR
Fixed in
Fixed in 4.4.6
CVSS
5.4 (medium)
Published
2022-12-05
Title
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 4.0.9
CVSS
10.0 (critical)