WordPress plugin
Wallet for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium8
- Low0
All Wallet for WooCommerce vulnerabilities
- Medium4.3Wallet for WooCommerce <= 1.6.9 - Missing Authorization to Authenticated (Subscriber+) Wallet Balance Inflation
≤1.6.9Update to 1.6.10
- Medium4.3Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration via terawallet_export_user_search AJAX Action
≤1.6.4Update to 1.6.5
- Medium4.3Authenticated (Customer+) Race Condition
≤1.5.15Update to 1.5.16
- Medium6.5Authenticated (Subscriber+) Incorrect Conversion between Numeric Types
≤1.5.6Update to 1.5.7
- High8.8Authenticated (Subscriber+) SQL Injection via 'search[value]'
≤1.5.4Update to 1.5.5
- Medium4.4Authenticated (Shop Manager+) Stored Cross-Site Scripting
≤1.5.0Update to 1.5.1
- Medium4.3Missing Authorization to Authenticated (Subscriber+) User Email Export
≤1.4.10Update to 1.4.11
- Medium4.3Cross-Site Request Forgery via admin_options
≤1.3.24Update to 1.4.0
- Medium4.3Insecure Direct Object Reference
≤1.4.3Update to 1.4.4
- High8.8Cross-Site Request Forgery via lock_unlock_terawallet
≤1.3.24Update to 1.4.0
Wallet for WooCommerce: common questions
Does Wallet for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Wallet for WooCommerce: 2 high, 8 medium. None are known to affect version null.
How do I check which version of Wallet for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Wallet for WooCommerce vulnerability?
CVE-2026-16538, published Aug 10, 2026: TeraWallet - Wallet for WooCommerce <= 1.6.9 - Missing Authorization to Authenticated (Subscriber+) Wallet Balance Inflation. Severity: Medium (CVSS 4.3).
Is any Wallet for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Wallet for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.