Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-42654

WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WP Swings Wallet System for WooCommerce

Default version status: unaffected

  • n/a to ≤ 2.7.5affected

References