Vulnerabilities / Woo Swish e-commerce
Woo Swish e-commerce vulnerabilities
Advisories WPSec published for BjornTech Swish for WooCommerce. Other sources may list more. Its attack surface: Woo Swish e-commerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-20 | WPSEC-2026-1266 | Woo Swish e-commerce <= 3.7.8 - Unauthenticated Authentication Bypass to Payment Service Credential Injection via Legacy OAuth Callback | Medium 6.5 | 3.7.9 |
| 2026-10-20 | WPSEC-2026-1265 | Woo Swish e-commerce <= 3.7.8 - Missing Authorization to Authenticated (Contributor+) Swish Service Connect and Disconnect | Medium 5.4 | 3.7.9 |
License: CC BY 4.0