CVE-2022-3995: TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-29 · updated 2026-06-17
Weakness: CWE-639

Description

The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient validation of the user-controlled key on the lock_unlock_terawallet AJAX action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to lock/unlock other users wallets.

Affected products

StandaloneTech TeraWallet – For WooCommerce: through 1.4.3

References

https://plugins.trac.wordpress.org/changeset/2817824/woo-wallet/trunk?contextall=1&old=2816610&old_path=%2Fwoo-wallet%2Ftrunk
https://www.wordfence.com/threat-intel/vulnerabilities/id/ec57e0b2-61b0-4b67-9784-dbb4e6c4e4a6?source=cve
https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3995
https://plugins.trac.wordpress.org/changeset/2817824/woo-wallet/trunk?contextall=1&old=2816610&old_path=%2Fwoo-wallet%2Ftrunk
https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3995

Get alerted when CVE-2022-3995 or the next vulnerability affects your stack