Advisories · Technology

WP Swings Wallet System for WooCommerce.

Every CVE that names WP Swings Wallet System for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57332 CVE record

CVSS 7.1 High

WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability
- WP Swings Wallet System for WooCommerce
- Broken access control
Not analysed yet 29 Jun 2026
CVE-2026-42654 CVE record

CVSS 7.1 High

WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability
- WP Swings Wallet System for WooCommerce
- Authentication bypass
Not analysed yet 2 Jun 2026
CVE-2025-68029 CVE record

CVSS 6.3 Medium

WordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerability
- WP Swings Wallet System for WooCommerce
- Information disclosure
Not analysed yet 5 Jan 2026
CVE-2025-54041 CVE record

CVSS 4.3 Medium

WordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability
- WP Swings Wallet System for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 16 Jul 2025
CVE-2025-32530 CVE record

CVSS 7.1 High

WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability
- WP Swings Wallet System for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 17 Apr 2025
CVE-2024-38699 CVE record

CVSS 7.5 High

WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability
- WP Swings Wallet System for WooCommerce
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-32446 CVE record

CVSS 5.4 Medium

WordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerability
- WP Swings Wallet System for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2024