CVE-2026-57332 Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions

Description

Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
Wallet System for WooCommerce 2.7	earliest → 2.7.6	No fix stated

Other CVEs of Wallet System for WooCommerce

The 7 CVEs of Wallet System for WooCommerce →

CVE-2026-42654 Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows… 7.1 High CVE-2025-68029 Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce… 6.3 Medium CVE-2025-54041 Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce… 4.3 Medium CVE-2025-32530 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Wallet… 7.1 High