Long Watch Studio vulnerabilities

Products

• MyRewards 2
• WooSupply – Suppliers, Supply Orders and Stock Management 1
• WooVIP – Membership plugin for WordPress and WooCommerce 1
• WooVirtualWallet – A virtual wallet for WooCommerce 1

Latest Long Watch Studio CVEs

Newest publication first

1. CVE-2026-40786 WordPress MyRewards plugin <= 5.7.3 - Broken Access Control vulnerability

   Published 2026-04-15

   Medium·CVSS 4.3 EPSS 0.15%

   Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyRewards: from n/a through <= 5.7.3.

2. CVE-2024-32688 WordPress MyRewards plugin <= 5.3.0 - Broken Access Control vulnerability

   Published 2024-04-22

   Medium·CVSS 6.5 EPSS 0.46%

   Missing Authorization vulnerability in Long Watch Studio MyRewards.This issue affects MyRewards: from n/a through 5.3.0.

3. CVE-2022-40700 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins

   Published 2024-01-19

   Critical·CVSS 9.8 EPSS 1.00%

   Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.