Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wallet_system_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWallet System For Woocommerce (05338546-8582-58b2-ab6b-05dbe81d86fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-108763 vulnerable 2026-11-03 10:18:01.461567 Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR
The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler to the current user's own account, taking the target user ID from a client-supplied request field with no ownership or capability check, allowing authenticated users with minimal privileges such as Subscriber or Customer to overwrite the KYC documents and verification status of any other user, including an administrator.
Published: 2026-10-29T06:00:24.396Z
Updated: 2026-10-29T10:56:07.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15045 vulnerable 2026-09-16 04:33:06.268045 Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount
MEDIUM (6.5)
The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkout without paying the merchant.
Published: 2026-08-12T11:23:57.834Z
Updated: 2026-08-12T12:16:50.889Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.