CVE-2026-16538 in Wallet for WooCommerce Plugin

الملخص

بحسب MITRE • 12/08/2026

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: WPScan
• حجز: 22/07/2026
• إفشاء: 12/08/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-388933
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-16538
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16538
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-16538/