Wallet System for WooCommerce – Digital Wallet, Cashback Rewards, Recharge User Wallets, View Transaction History, CVE-2026-15045
- CVE, Research URL
- Published on
- Aug 12, 2026
- Research Description
- The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkout without paying the merchant.
- Affected versions
-
max 2.7.10.
- Status
-
vulnerable