Advisories · Technology

Wallet System for WooCommerce.

Every CVE that names Wallet System for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108763 CVE record

CVSS 4.3 Medium

Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR
- Wallet System for WooCommerce
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-93509 CVE record

CVSS 6.5 Medium

Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount
- Wallet System for WooCommerce
- CWE-20
Not analysed yet 8 Oct 2026
CVE-2026-94246 CVE record

CVSS 6.3 Medium

Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOR
- Wallet System for WooCommerce
- Broken access control
Not analysed yet 8 Oct 2026
CVE-2026-94245 CVE record

CVSS 6.5 Medium

Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOR
- Wallet System for WooCommerce
- Broken access control
Not analysed yet 8 Oct 2026
CVE-2026-94244 CVE record

CVSS 4.3 Medium

Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export
- Wallet System for WooCommerce
- Information disclosure
Not analysed yet 8 Oct 2026
CVE-2026-15045 CVE record

CVSS 6.5 Medium

Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount
- Wallet System for WooCommerce
- CWE-472
Not analysed yet 12 Aug 2026