{"id":"CVE-2026-16538","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-16538","summary":"The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up…","details":"The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value.","published":"2026-08-12T06:19:10.620","modified":"2026-08-12T06:19:10.620","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://wpscan.com/vulnerability/bc87bb91-a0c4-4d35-8be1-6d3ec2623a86/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T06:19:10.620"}}