A vulnerability was found in WP Swings Wallet System for WooCommerce Plugin up to 2.7.5 on WordPress and classified as critical. This affects an unknown function. The manipulation results in authentication bypass using alternate channel.
This vulnerability is known as CVE-2026-42654. It is possible to launch the attack remotely. No exploit is available.