Wallet for WooCommerce

Уязвимости

• CVE-2022-36401без авторизации · нужен клик≤ 1.3.24

  WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-32398нужен вход≤ 1.5.15

  WordPress TeraWallet – For WooCommerce plugin <= 1.5.15 - Race Condition vulnerability

  Средний 6.5

• CVE-2024-7747подписчик+≤ 1.5.6

  Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types

  Средний 6.5

• CVE-2024-6353подписчик+≤ 1.5.4

  Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'

  Средний 6.5

• CVE-2024-32584высокие права≤ 1.5.0

  WordPress TeraWallet plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2022-40198без авторизации · нужен клик≤ 1.3.24

  WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)

  Средний 4.3

• CVE-2026-12103подписчик+≤ 1.6.4

  Wallet for WooCommerce <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration via terawallet_export_user_search AJAX Action

  Средний 4.3

• CVE-2024-1690подписчик+≤ 1.4.10

  TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscribe

  Средний 4.3

• CVE-2022-3995подписчик+≤ 1.4.3

  TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference

  Средний 4.3