Vulnerabilities / Wallet for WooCommerce
Wallet for WooCommerce vulnerabilities
Advisories WPSec published for Wallet for WooCommerce. Other sources may list more. Its attack surface: Wallet for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-10 | WPSEC-2026-0692 | Wallet for WooCommerce <= 1.7.2 - Authenticated (Subscriber+) Business Logic Flaw to Unpaid Wallet Credit via Cash on Delivery Top-Up | Medium 5.3 | 1.7.3 |
| 2026-10-09 | WPSEC-2026-0683 | Wallet for WooCommerce <= 1.7.1 - Unauthenticated Business Logic Flaw to Unlimited Wallet Credit via Visit Referral Rewards | Medium 5.3 | 1.7.2 |
| 2026-10-06 | WPSEC-2026-0444 | Wallet for WooCommerce <= 1.7.0 - Authenticated (Vendor+) Incorrect Authorization to Wallet Partial Payment Refund | Low 3.1 | 1.7.1 |
| 2026-10-06 | WPSEC-2026-0443 | Wallet for WooCommerce <= 1.7.0 - Cross-Site Request Forgery to Wallet Partial Payment Refund | Medium 4.3 | 1.7.1 |
License: CC BY 4.0