CVE-2026-57332highCWE-862

CVE-2026-57332: falha de alta gravidade em WP Swings Wallet System for WooCommerce

WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability

Publicada em

Seguir esta CVE+ Monitorar Wallet System for WooCommerce

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.3%
Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Produtos afetados
WP Swings · Wallet System for WooCommerce
CVEs relacionadas — WP Swings Wallet System for WooCommerce

No mesmo produto, das mais perigosas para as menos.

CVE-2024-38699HIGHWordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerabilityEPSS 0.4%CVE-2025-32530HIGHWordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-32446MEDIUMWordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-42654HIGHWordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2025-68029MEDIUMWordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-54041MEDIUMWordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%