Description
The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Wallet for WooCommerce | < 1.6.10 | 1.6.10 |
References
- https://wpscan.com/vulnerability/bc87bb91-a0c4-4d35-8be1-6d3ec2623a86/ exploit vdb-entry technical-description