Threats tagged 'ghsa-gf9j-rpmq-8vq3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-15045Wallet System for WooCommerce (WordPress plugin) · External Control of Assumed-Immutable Web Parameter Medium6.5EPSS 0.3%2026-08-12CVE Database V5CVE-2026-15045 The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkout without paying the merchant. EPSS 0.3%Vulnerability CWE-472 #ghsa-gf9j-rpmq-8vq3	CVE Database V5	2026-08-12

Page 1 of 1