Really Simple Security logo

Log out
Get PRO

Latest

Information leakage vulnerability in Wallet System for WooCommerce – Wallet, Digital Wallet, Cashback, Recharge User Wallets, Partial Payments, Wallet restriction, Refunds 2.5.13

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 11, 2024

The Wallet System for WooCommerce, a plugin for WordPress that allows users to store digital money, offer cashback, and make partial payments, has a security flaw. This flaw allows anyone, even those who are not logged in, to access the log files and potentially see private information.

Detected in:

Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments fixed vulnerable versions:
Wallet System for WooCommerce – Digital Wallet, Wallet Cashback, Refunds, Partial Payment, Store Credit, Loyalty Rewards fixed vulnerable versions:
Wallet System for WooCommerce – Digital Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction, Store Credit, Loyalty Rewards, Payment Gateway, E-Wallet fixed vulnerable versions:
Wallet System for WooCommerce – Ensure Secure and Easy Transactions fixed vulnerable versions:
Wallet System for WooCommerce – Wallet, Digital Wallet, Cashback, Manage Recurring Payments, Partial Payments, Wallet restriction, Manage Refunds, Offer Rewards fixed vulnerable versions:
Wallet System for WooCommerce – Wallet, Digital Wallet, Cashback, Recharge User Wallets, Partial Payments, Wallet restriction, Refunds fixed vulnerable versions: >= * <= 2.5.13
Wallet System for WooCommerce – Wallet, Secure Online Payments, Cashback, Refunds, Partial Payment, Wallet Restriction, WooCommerce Payment fixed vulnerable versions:
Wallet System for WooCommerce – Wallet, Secure Transactions, Cashback, Refunds, Partial Payment, Wallet Restriction, Offer Rewards fixed vulnerable versions:
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.