VulnSocial

CVE-2026-57332Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-06-29); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-06-29: 2Mentions · 2026-06-30: 2Patch / Workaround · 2026-06-30: 2Technical Details · 2026-06-29: 1Technical Details · 2026-06-30: 206-2906-30
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-292
Disclosure1General1
2026-06-302
Disclosure1Patch1
Full discourse4 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    #CVE-2026-57332 - Privilege Escalation in Wallet System for #WooCommerce. Subscriber broken access control. #CVSS 7.1. No patch available. Update immediately or restrict access. #CVEAlert #WordPress #infosec @WooCommerce #CyberSecurity #developers #cybernews More: https://www.valtersit.com/cve/CVE-2026-57332/

    Post summary

    A new vulnerability (CVE‑2026‑57332) affecting WooCommerce's wallet system was disclosed, describing a privilege‑escalation flaw via broken subscriber access control, CVSS 7.1, no patch available, and urging immediate update or access restriction.

    0000055
    967 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-57332 (CVSS 7.1) - Broken Access Control in Wallet System for WooCommerce ≤2.7.6. Subscriber-level users can exploit this flaw. Patch immediately. #CVE #Vulnerability #PatchNow #CyberSecurity https://t.co/1y6oBLJYnQ

    Post summary

    A high‑severity broken access control flaw (CVE‑2026‑57332) in WooCommerce wallets is disclosed, urging users to apply the patch immediately.

    0000057
    55 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-57332 Subscriber Broken Access Control in Wallet System for WooCommerce &lt;= 2.7.6 versions. https://www.cve.org/CVERecord?id=CVE-2026-57332 ----- Traducción: CVE-2026-57332 Control de acceso roto para suscriptores en el sistema de billetera para WooCommerce &lt;=… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026‑57332, providing a link to the official CVE record but no further technical, exploit, or mitigation details.

    0000036
    89 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-57332 Subscriber Broken Access Control in Wallet System for WooCommerce &lt;= 2.7.6 versions. https://www.cve.org/CVERecord?id=CVE-2026-57332

    Post summary

    The post cites CVE‑2026‑57332 with a brief vulnerable component description but offers no PoC, exploit, patch, or evidence of active exploitation.

    00000595
    57.7K followersView on X

Explore more

Back to dashboard