Verified

CVE-2026-94246: Wallet System for WooCommerce 2.0.0 to before 2.8.0

Affected technology

Wallet System for WooCommerce · 2.0.0 to before 2.8.0
Vendor not specified by the source

Description’s affected range: before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it

Component: Not specified by the source

The source does not specify what an attacker can achieve.

Published 2026-10-08 08:49:51.263802+00:00

GitHub Advisory Database · Source record · observed 2026-10-08 08:50:52.119177+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-08 08:49:39.219831+00:00 UTC