What is CVE-2026-15045?
CVE-2026-15045 is a vulnerability in the Wallet System for WooCommerce plugin before version 2.7.10. It allows authenticated customers to arbitrarily reduce order totals, even to zero, by supplying an unvalidated wallet amount during checkout. Updating to the latest plugin version is recommended.
Azərbaycanca: CVE-2026-15045, WooCommerce üçün Wallet System plaginində (2.7.10-dan əvvəl) aşkar edilmiş boşluqdur. Bu, autentifikasiya olunmuş müştərilərə checkout zamanı öz cüzdan balansından daha çox məbləğ daxil edərək sifariş qiymətini sıfıra endirməyə imkan verir. Plagini ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-20
FAQ2
Which version of the Wallet System for WooCommerce plugin is affected by CVE-2026-15045?
This vulnerability affects plugin versions before 2.7.10.
What can an authenticated customer do by exploiting CVE-2026-15045?
An authenticated customer can arbitrarily reduce the order total, even to zero, by supplying an unvalidated wallet amount during checkout.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.