EUVD-2026-117196

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function randomint of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

CVE-2026-122049

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function randomint of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

CVE-2026-122049

The Campcodes Bitcoin Wallet System 1.0 is vulnerable to an improper restriction of excessive authentication attempts due to a flaw in the random_int function within the core/app/Http/Controllers/Auth/ForgotPasswordController.php file. This vulnerability allows for remote exploitation, though the...

CVE-2026-122049 Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function randomint of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

PT-2026-137238

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

CVE-2026-108763

The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler to the current user's own account, taking the target user ID from a client-supplied request field with no ownership or capability check, allowing authenticated users with minimal...

WordPress Wallet System for WooCommerce plugin < 2.8.2 - Subscriber+ KYC Document Overwrite vulnerability

Subscriber+ KYC Document Overwrite vulnerability discovered by Marcial Diaz in WordPress Plugin Wallet System for WooCommerce versions 2.8.2...

CVE-2026-108763 Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR

The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler to the current user's own account, taking the target user ID from a client-supplied request field with no ownership or capability check, allowing authenticated users with minimal...

EUVD-2026-112620

The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler to the current user's own account, taking the target user ID from a client-supplied request field with no ownership or capability check, allowing authenticated users with minimal...

CVE-2026-108763

The Wallet System for WooCommerce WordPress plugin, in versions before 2.8.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The KYC document submission handler fails to perform ownership or capability checks, allowing it to accept a target user ID from a client-supplied reque...

CVE-2026-108763 Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR

The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler to the current user's own account, taking the target user ID from a client-supplied request field with no ownership or capability check, allowing authenticated users with minimal...

PT-2026-130638

The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler to the current user's own account, taking the target user ID from a client-supplied request field with no ownership or capability check, allowing authenticated users with minimal...

CVE-2026-108763: Unknown Wallet System for WooCommerce: The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler…

The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler to the current user's own account, taking the target user ID from a client-supplied request field with no ownership or capability check, allowing authenticated users with minimal...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Wallet Balance Manipulation vulnerability

Subscriber+ Wallet Balance Manipulation vulnerability discovered by Stefan Löwen CODE WHITE GmbH in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Arbitrary Wallet Balance Theft vulnerability

Subscriber+ Arbitrary Wallet Balance Theft vulnerability discovered by Stefan Spasic in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Forged Wallet Withdrawal Request vulnerability

Subscriber+ Forged Wallet Withdrawal Request vulnerability discovered by Mytears in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

CVE-2026-93509

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

CVE-2026-93509 Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

CVE-2026-93509

The Wallet System for WooCommerce WordPress plugin (versions 2.0.0 - 2.7.10 ) is vulnerable to a wallet balance manipulation flaw. The root cause is a failure to validate that transfer amounts are positive, combined with the system computing the sender's new balance from a stale snapshot taken be...

CVE-2026-93509 Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...