CVE-2026-16538

CVE-2026-16538: TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

Vendor Unknown
Product Wallet for WooCommerce
Published August 12, 2026
Last update August 12, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value.

Key dates

02Disclosure timeline

August 12, 2026 CVE published
August 12, 2026 Record updated