7.5
Élevée
CVE-2024-38699 Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not…
Description
Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wallet System for WooCommerce 2.5 | premières → 2.5.13 | Pas de correctif indiqué |
| wallet_system_for_woocommerce 2.5 | premières → 2.5.13 | Pas de correctif indiqué |
Autres CVE de Wallet System for WooCommerce
Les 7 CVE de Wallet System for WooCommerce →
CVE-2026-57332
Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions
7.1
Élevée
CVE-2026-42654
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows…
7.1
Élevée
CVE-2025-68029
Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce…
6.3
Moyenne
CVE-2025-54041
Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce…
4.3
Moyenne