What’s Vulnerable › Products

WP Swings Wallet System for WooCommerce vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your WP Swings Wallet System for WooCommerce version is affected

Latest WP Swings Wallet System for WooCommerce vulnerabilities

• CVE-2026-57332 — WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability (CVSS 7.1)
• CVE-2026-42654 — WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability (CVSS 7.1)
• CVE-2025-14450 — Wallet System for WooCommerce <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation (CVSS 6.5)
• CVE-2025-68029 — WordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerability (CVSS 6.3)
• CVE-2025-54041 — WordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
• CVE-2025-32530 — WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-13724 — Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization (CVSS 4.3)
• CVE-2024-13682 — Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Cross-Site Request Forgery (CVSS 4.3)
• CVE-2024-38699 — WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability (CVSS 7.5)
• CVE-2024-32446 — WordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)