2 matches found
CVE-2026-93509
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...
6.5CVSS0.0019EPSS
SaveExploits0References1
EUVD-2026-94830
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...
6.5CVSS5.8AI score0.0019EPSS
SaveExploits0References1
20