Aller au contenu
Se connecter
6.5 Moyenne

CVE-2025-14450 The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a…

Description

The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'change_wallet_fund_request_status_callback' function in all versions up to, and including, 2.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to manipulate wallet withdrawal requests and arbitrarily increase their wallet balance or decrease other users' balances.

Produits et versions touchés

Produit Versions touchées Corrigé en
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments 2.7 premières → 2.7.2 Pas de correctif indiqué

Autres CVE de Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments

Les 3 CVE de Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments →
CVE-2024-13724 The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for… 4.3 Moyenne CVE-2024-13682 The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for… 4.3 Moyenne
Suivre cette CVE