7.1Yüksek

CVE-2026-42654WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability

WP Swings Wallet System for WooCommerce Yayım: (5 ay önce)

Açıklama

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

Zayıflık türü (CWE): CWE-288

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
WP Swings Wallet System for WooCommerce ≤ 2.7.5

Kaynaklar ve yamalar