Wallet System For Woocommerce (Unknown) - vulnerabilities (CVEs)

5 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-10-08. Vendor: Unknown.

CVEs of Wallet System For Woocommerce

• CVE-2026-93509 - CVSS 6.5 (medium), 2026-10-08: The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new…
• CVE-2026-94246 - CVSS 6.3 (medium), 2026-10-08: The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user…
• CVE-2026-94244 - CVSS 4.3 (medium), 2026-10-08: The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain…
• CVE-2026-94245 - CVSS 6.5 (medium), 2026-10-08: The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet transfer owns the wallet being debited,…
• CVE-2026-15045 - CVSS 6.5 (medium), 2026-08-12: The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance…