WordPress TeraWallet - Wallet for WooCommerce plugin < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up vulnerability

WordPress TeraWallet - Wallet for WooCommerce plugin 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up vulnerability discovered by Guillermo Álvarez Fernández in WordPress Plugin TeraWallet – For WooCommerce versions 1.6.10...

CVE-2026-16538 TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

CVE-2026-16538

The Wallet for WooCommerce (also known as TeraWallet ) WordPress plugin in versions before 1.6.10 is vulnerable to a wallet balance inflation flaw. The root cause is a failure to verify the actual amount collected during a wallet top-up before crediting the account. This allows customers to top u...