7.1
High
CVE-2026-42654 Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows…
Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wallet System for WooCommerce 2.7 | earliest → 2.7.5 | No fix stated |
Other CVEs of Wallet System for WooCommerce
The 7 CVEs of Wallet System for WooCommerce →
CVE-2026-57332
Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions
7.1
High
CVE-2025-68029
Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce…
6.3
Medium
CVE-2025-54041
Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce…
4.3
Medium
CVE-2025-32530
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Wallet…
7.1
High