CVE-2026-42654CWE-288

WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability

High · published June 2, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation.

This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-06-02T14:48Z
EPSS history
Timeline
  • 02 JUN 14:48Z
    WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability
    cvelistv5