Wallet System for WooCommerce vulnerabilities

3 known vulnerabilities in Wallet System for WooCommerce from WP Swings. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Wallet System for WooCommerce: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-42654Jun 2, 2026WP Swings

  Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

• 7.1 High severity

  Wallet System for WooCommerce: Improper Neutralization of Input During Web Page Generation

  CVE-2025-32530Apr 17, 2025WP Swings

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Reflected XSS.This issue affects Wallet System for WooCommerce: from n/a through

• 7.5 High severity

  Wallet System for WooCommerce: Missing Authorization

  CVE-2024-38699Aug 13, 2024WP Swings

  Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.