CVE-2024-25100: Wpswings Coupon Referral Program

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4.

Affected products

  • Wpswings Coupon Referral Program: before 1.8.4 (fixed in 1.8.4)

Published 2024-02-12. Last modified 2026-06-17.