WordPress Vulnerability Scanner WPSec
Vulnerabilities / Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments

Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments vulnerabilities

Advisories WPSec published for Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments. Other sources may list more. Its attack surface: Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-22 WPSEC-2026-1450 Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments <= 2.8.1 - Cross-Site Request Forgery to Repeated Partial Payment Wallet Refund Medium 4.3 2.8.2
2026-10-22 WPSEC-2026-1449 Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments <= 2.8.1 - Authenticated (Subscriber+) Comment Reward Limit Bypass Medium 4.3 2.8.2
2026-10-07 WPSEC-2026-0570 Wallet System for WooCommerce <= 2.7.10 - Authenticated (Subscriber+) Insecure Direct Object Reference to Wallet Withdrawal Requests Medium 4.3 2.8.0
2026-10-07 WPSEC-2026-0569 Wallet System for WooCommerce <= 2.7.10 - Authenticated (Subscriber+) Insecure Direct Object Reference to Wallet Balance Transfer Medium 6.5 2.8.0
2026-10-07 WPSEC-2026-0568 Wallet System for WooCommerce <= 2.7.10 - Authenticated (Subscriber+) Missing Authorization to Sensitive Information Exposure via Wallet Transaction Export Medium 4.3 2.8.0
2026-10-07 WPSEC-2026-0567 Wallet System for WooCommerce <= 2.7.10 - Unauthenticated Sensitive Information Exposure via Publicly Accessible Transaction CSV Export File Low 3.7 2.8.0
2026-10-07 WPSEC-2026-0566 Wallet System for WooCommerce <= 2.7.10 - Authenticated (Subscriber+) Wallet Balance Manipulation via Negative Transfer Amount Medium 6.5 2.8.0

License: CC BY 4.0