VYPR

Wallet System for WooCommerce Points and Rewards for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-11782Jul 30, 2026
    risk 0.00cvss epss 0.00

    The Points and Rewards for WooCommerce WordPress plugin before 2.10.1 does not have authorisation checks in place on a wallet and points update action that is available to unauthenticated users, and does not verify that the requester owns the account being changed, allowing…