Wallet for WooCommerce

Güvenlik açıkları

• CVE-2022-36401kimlik doğrulamasız · tıklama gerekir≤ 1.3.24

  WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2026-32398giriş gerekir≤ 1.5.15

  WordPress TeraWallet – For WooCommerce plugin <= 1.5.15 - Race Condition vulnerability

  Orta 6.5

• CVE-2024-7747abone+≤ 1.5.6

  Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types

  Orta 6.5

• CVE-2024-6353abone+≤ 1.5.4

  Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'

  Orta 6.5

• CVE-2024-32584yüksek yetki≤ 1.5.0

  WordPress TeraWallet plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2022-40198kimlik doğrulamasız · tıklama gerekir≤ 1.3.24

  WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)

  Orta 4.3

• CVE-2026-12103abone+≤ 1.6.4

  Wallet for WooCommerce <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration via terawallet_export_user_search AJAX Action

  Orta 4.3

• CVE-2024-1690abone+≤ 1.4.10

  TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscribe

  Orta 4.3

• CVE-2022-3995abone+≤ 1.4.3

  TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference

  Orta 4.3