CVE-2024-13724

CVE-2024-13724 affects Wallet System for WooCommerce (WordPress plugin) up to version 2.6.2, enabling unauthenticated users to manipulate wallet balances and transfers due to a missing authorization check. Connected sources indicate a patch is available (patch status: Patched); upgrade to the fix...

CVE-2024-13682

The CVE-2024-13682 entry concerns the Wallet System for WooCommerce plugin for WordPress. The vulnerability is a Cross-Site Request Forgery (CSRF) in all versions up to and including 2.6.2, caused by missing or incorrect nonce validation in class-wallet-user-table.php. This allows unauthenticated...