WordPress security by component

Return Refund and Exchange For WooCommerce

Plugin description

Return Refund and Exchange For WooCommerce is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Nov 21, 2025; the highest CVE/CNA score is 9.8.

Plugin slug: return-refund-and-exchange-for-woocommerce

Latest vulnerability

CVE-2025-12881: Return Refund and Exchange For WooCommerce: A security weakness

Return Refund and Exchange For WooCommerce is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedNov 21, 2025

Safe version guidanceSee mitigation notes

		Safe version
Nov 21, 2025	CVE-2025-12881 Return Refund and Exchange For WooCommerce: A security weakness Return Refund and Exchange For WooCommerce is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.4 NVDPending
Nov 21, 2025	CVE-2025-12086 Return Refund and Exchange For WooCommerce: A security weakness Return Refund and Exchange For WooCommerce is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending
Dec 26, 2022	CVE-2022-4047 Return Refund and Exchange For WooCommerce: A security weakness Return Refund and Exchange For WooCommerce is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE9.8 NVD9.8