Plugin icon

Wallet for WooCommerce

woo-wallet

Vulnerabilities:

9

Last Updated:

September 11, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-08-10
Title
TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up
Fixed in
Fixed in 1.6.10
CVSS
6.5 (medium)
Published
2026-07-10
Title
Wallet for WooCommerce < 1.6.5 - Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration via terawallet_export_user_search AJAX Action
Fixed in
Fixed in 1.6.5
CVSS
4.3 (medium)
Published
2026-02-20
Title
TeraWallet – For WooCommerce < 1.5.16 - Authenticated (Customer+) Race Condition
Fixed in
Fixed in 1.5.16
CVSS
4.3 (medium)
Published
2024-11-27
Title
Wallet for WooCommerce < 1.5.7 - Subscriber+ Funds Creation
Fixed in
Fixed in 1.5.7
CVSS
6.5 (medium)
Published
2024-07-11
Title
Wallet for WooCommerce < 1.5.5 - Authenticated (Subscriber+) SQL Injection via 'search[value]'
Fixed in
Fixed in 1.5.5
CVSS
8.8 (high)
Published
2024-04-24
Title
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds < 1.5.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.1
CVSS
4.4 (medium)
Published
2024-03-07
Title
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds < 1.4.11 - Missing Authorization to Authenticated (Subscriber+) User Email Export
Fixed in
Fixed in 1.4.11
CVSS
4.3 (medium)
Published
2022-11-14
Title
TeraWallet - For WooCommerce < 1.4.4 - Subscriber+ Arbitrary Wallet Lock/Unlock via IDOR
Fixed in
Fixed in 1.4.4
CVSS
4.3 (medium)
Published
2022-10-30
Title
TeraWallet – For WooCommerce < 1.4.0 - Settings Update via CSRF
Fixed in
Fixed in 1.4.0
CVSS
4.3 (medium)