CVE-2026-42654 — WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability

CVE-2026-42654

WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability PUBLISHED

Description (CNA)

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

Affected (CNA)

Vendor / product	Versions
WP Swings / Wallet System for WooCommerce	affected n/a through 2.7.5

CWE

CWE-288

References

https://patchstack.com/database/wordpress/plugin/wallet-system-for-woocommerce/vulnerability/wordpress-wallet-system-for-woocommerce-plugin-2-7-5-broken-authentication-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.