CVE-2026-15045

Name of the Vulnerable Software and Affected Versions Wallet System for WooCommerce versions prior to 2.7.10

Description Authenticated users with Custom-level access and above can bypass payments during checkout. The issue occurs because the plugin fails to validate the user-supplied wallet amount against the actual stored balance, allowing customers to arbitrarily reduce their order total, potentially down to zero, and complete the transaction without paying the merchant.

Recommendations Update to version 2.7.10 or later.