Advisories · Technology

subratamal Wallet for WooCommerce.

Every CVE that names subratamal Wallet for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12103 CVE record

CVSS 4.3 Medium

Wallet for WooCommerce <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration via terawallet_export_user_search AJAX Action
- subratamal Wallet for WooCommerce
- Broken access control
Not analysed yet 11 Jul 2026
CVE-2024-7747 CVE record

CVSS 6.5 Medium

Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types
- subratamal Wallet for WooCommerce
- CWE-681
Not analysed yet 28 Nov 2024
CVE-2024-6353 CVE record

CVSS 8.8 High

Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'
- subratamal Wallet for WooCommerce
- SQL injection
Not analysed yet 12 Jul 2024
CVE-2024-1690 CVE record

CVSS 4.3 Medium

TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscriber+) User Email Export
- subratamal Wallet for WooCommerce
- Broken access control
Not analysed yet 13 Mar 2024
CVE-2022-3995 CVE record

CVSS 4.3 Medium

TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference
- subratamal Wallet for WooCommerce
- Broken access control
Not analysed yet 29 Nov 2022