Vulnerabilities / Return Refund and Exchange For WooCommerce
Return Refund and Exchange For WooCommerce vulnerabilities
Advisories WPSec published for Return Refund and Exchange For WooCommerce. Other sources may list more. Its attack surface: Return Refund and Exchange For WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-24 | WPSEC-2026-1597 | Return Refund and Exchange For WooCommerce <= 4.6.4 - Authenticated (Subscriber+) Missing Authorization to Shop Manager Impersonation via 'order_msg_type' Parameter | Medium 4.3 | 4.6.5 |
| 2026-10-24 | WPSEC-2026-1596 | Return Refund and Exchange For WooCommerce <= 4.6.4 - Missing Authorization to Unauthenticated Plugin Settings Update | Medium 5.3 | 4.6.5 |
License: CC BY 4.0