WordPressプラグイン「Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments」に脆弱性（CVE-2026-93509）

The Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments plugin for WordPress is vulnerable to Improper Input Validation in all versions up to 2.8.0. This is due to missing validation that the wallet transfer amount is a positive number, and reuse of a stale wallet balance snapshot (read before the recipient is credited) when debiting the sender, combined with a client-supplied user ID accepted in place of the authenticated session user. This makes it possible for authenticated attackers, with subscriber-level access and above, to mint wallet funds for themselves or drain another user's wallet balance into their own account by supplying a negative or zero transfer amount and exploiting the stale pre-credit balance snapshot used when debiting the sender.

The Wallet System for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in versions 2.0.0 through 2.7.10. This is due to missing validation that the transfer amount is a positive number, combined with use of abs() on the sender's stale pre-credit balance when computing the debit, and trust of a client-supplied user ID. This makes it possible for authenticated attackers, with subscriber-level access and above, to mint wallet funds for themselves or drain another user's wallet balance by submitting a negative transfer amount, exploiting the absolute-value debit and a stale pre-credit balance snapshot.