CVE Catalog
CVE-2026-16538
UnknownSummary
The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value.
Risk Assessment
Customers can gain an unfair financial advantage, leading to losses for the store.
Recommendation
Update the Wallet for WooCommerce plugin to version 1.6.10 or later that includes the fix.
Original NVD description (English source)
The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value.