CVE-2023-27608

Summary

CVE-2023-27608 refers to a Missing Authorization vulnerability discovered in the WP Swings Points and Rewards plugin for WooCommerce. This issue allows unauthenticated users to access and manipulate reward points, affecting versions from n/a through 1.5.0. The absence of proper authorization checks exposes sites using this plugin to potential data tampering and privilege escalation attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.