CVE-2024-13724

MEDIUM 4.3

Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to increase their own wallet balance, transfer balances between arbitrary users and initiate transfer requests from other users' wallets.

CWE	CWE-285
Vendor	wpswings
Product	wallet system for woocommerce – digital wallet, buy now pay later (bnpl), instant cashback, referral program, partial & subscription payments
Published	Mar 4, 2025
Last Updated	Apr 8, 2026

Stay Ahead of the Next One

Get instant alerts for wpswings wallet system for woocommerce – digital wallet, buy now pay later (bnpl), instant cashback, referral program, partial & subscription payments

Be the first to know when new medium vulnerabilities affecting wpswings wallet system for woocommerce – digital wallet, buy now pay later (bnpl), instant cashback, referral program, partial & subscription payments are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

wpswings / Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments

0 ≤ 2.6.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/bda326b0-9049-496a-a600-fa65151ce98f?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3244479%40wallet-system-for-woocommerce%2Ftrunk&old=3231275%40wallet-system-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=

Credits

Tim Coen