CVE-2026-15045

6.5 Moyenne

Publiée le 12/08/2026 à 14:17 · Modifiée le 26/08/2026 à 18:30 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkout without paying the merchant.

Traduire en français

Produits concernés

Unknown Wallet System for WooCommerce

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	contact@wpscan.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-472

Références

https://wpscan.com/vulnerability/fc818fa4-5daa-430f-82da-0c96ec531ca3/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories