Medium · 4.3 CVE-2025-54041 EUVD-2025-21662GHSA-72w8-j285-2m5c

WordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP Swings Product: Wallet System for WooCommerce Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Cross Site Request Forgery.This issue affects Wallet System for WooCommerce: from n/a through <= 2.6.7.

Affected products

Vendor	Product	Affected	Fixed
WP Swings	Wallet System for WooCommerce	≤ 2.6.7	—

References

https://patchstack.com/database/Wordpress/Plugin/wallet-system-for-woocommerce/vulnerability/wordpress-wallet-system-for-woocommerce-plugin-2-6-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry