{"cvss":7.5,"datePublished":"","dateUpdated":"","description":"WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability | Affected: WP Swings / Return Refund and Exchange For WooCommerce | CVSS: 7.5 (HIGH) | EPSS: 0.00346 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-81799","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Return Refund and Exchange For WooCommerce","severity":"HIGH","source":"circl_kev","title":"CVE-2026-81799","vendor":""}