A vulnerability, which was classified as
critical, was found in
wpswings Return Refund and Exchange for WooCommerce Plugin up to 4.4.5 on WordPress. Affected is an unknown function. The manipulation leads to improper authorization.
This vulnerability is traded as
CVE-2024-13692. It is possible to launch the attack remotely. There is no exploit available.