CVE-2024-25100

CVE-2024-25100 is a Deserialization of Untrusted Data vulnerability in the WordPress Coupon Referral Program plugin (coupon-referral-program) affecting versions up to 1.7.2 (n/a before 1.8.4 per sources). The issue is an unauthenticated PHP object injection vulnerability in WP Swings Coupon Refer...

CVE-2023-52190

CVE-2023-52190 concerns the WordPress plugin Coupon Referral Program (WP Swings) with an unauthenticated exposure of sensitive data. Public sources (Wordfence, Patchstack, and CVE listings) indicate: affected versions are up to and including 1.7.2; the issue is described as sensitive data exposur...