BjornTech Swish for WooCommerce

BjornTech Swish for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for BjornTech Swish for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Alpaslan Fatih Sözer. BjornTech Swish for WooCommerce is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all BjornTech Swish for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-111835

BjornTech Swish for WooCommerce <= 3.7.8 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv3.7.9

BjornTech Swish for WooCommerce

bjorntech

Author

bjorntech

4.6(20)
92/100
Last Updated
2026-10-18 (5d ago)
Active Installs
2,000+
Downloads
111,079
Requires WP
5.3+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2018-10-15 (8y ago)

See our guide on how to set up the plugin with BjornTech as the Technical supplier. Our plugin makes it possible for you to accept Swish as payment method in your webshop. This payment method suits you if you want to offer your customers fast, simple and safe mobile payments. As addition to the plugin you need the service Swish e-commerce that you order from one of the Swedish banks offering the service. Ask your bank if it does. Swish e-commerce is a special service developed for e-commerce and differs from the normal private “Swish” service and the corporate Swish corporate. Some banks have made it possible to order the service online in their internet bank but most of the banks still require a filled in and signed form to be sent in. The plugin supports three connection methods described below: Technical supplier Swish offers the possiblity to use a technical supplier when connecting your webshop to your bank. This is the easiest way to use the plugin. You select BjornTech as Technical Supplier in your internet bank and configure the plugin to use a technical supplier. Read more about the status of Technical Supplier in your bank and how to configure it in our guide Local certificate If your bank is not supporting the choice of technical supplier you can create a certificate of your own and place it on your webserver. You will find instructions for doing this in our installation description. Simulator If you just want to see how the plugin will look like in your webshop or if you need to test payments in your staging or test environment you can configure the plugin to simulate payments. A payment done via the simulator is done by a pre-configured fictive mobile number and will be automatically approved by the system. Because of this you can not see how the payment will look like in the Swish App

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C