CVE-2026-81799

Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce <= 4.6.4 versions.

Published Sep 10, 2026
CVSS 7.5 high
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

WP Swings Return Refund and Exchange For WooCommerce

CVE-2026-81799 at the National Vulnerability Database