This vulnerability is a race condition in the TeraWallet – For WooCommerce plugin that allows concurrent execution using shared resources without proper synchronization. This can lead to integrity violations, such as inconsistent or incorrect wallet balances or transactions. The issue affects all versions up to 1.5.15. The CVSS vector indicates the attack requires network access with low complexity and low privileges, no user interaction is needed, and the impact is on integrity only. No patch or remediation information is currently available.

The vulnerability allows an attacker with low privileges to exploit a race condition, potentially causing integrity issues within the wallet system, such as unauthorized modification or corruption of wallet balances or transactions. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the wallet functionality to trusted users only and monitor for suspicious concurrent transaction attempts. Avoid relying on the plugin for critical financial operations without additional safeguards.