High · 7.1 CVE-2026-42654 EUVD-2026-33947GHSA-qqrj-x4c5-376m

WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability

Published Jun 2, 2026 · Updated Jun 2, 2026 · Assigned by Patchstack

Vendor: WP Swings Product: Wallet System for WooCommerce Category: Web / CMS

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation.

This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

Affected products

Vendor	Product	Affected	Fixed
WP Swings	Wallet System for WooCommerce	≤ 2.7.5	—

References

https://patchstack.com/database/wordpress/plugin/wallet-system-for-woocommerce/vulnerability/wordpress-wallet-system-for-woocommerce-plugin-2-7-5-broken-authentication-vulnerability?_s_id=cve vdb-entry