7.5
High
CVE-2024-38699 Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not…
Description
Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wallet System for WooCommerce 2.5 | earliest → 2.5.13 | No fix stated |
| wallet_system_for_woocommerce 2.5 | earliest → 2.5.13 | No fix stated |
Other CVEs of Wallet System for WooCommerce
The 7 CVEs of Wallet System for WooCommerce →
CVE-2026-57332
Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions
7.1
High
CVE-2026-42654
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows…
7.1
High
CVE-2025-68029
Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce…
6.3
Medium
CVE-2025-54041
Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce…
4.3
Medium