Bitcoin and Altcoin Wallets
Bitcoin and Altcoin Wallets has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Bitcoin and Altcoin Wallets has a vendor fix available, so running the current release closes it.
All of these findings were reported by SOPROBRO. Bitcoin and Altcoin Wallets is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-24544Bitcoin and Altcoin Wallet <= 6.3.1 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Bitcoin and Altcoin Wallets
Author
dashed-slug.net
Custodial cryptocurrency wallets. At a glance Bitcoin and Altcoin Wallets is a FREE WordPress plugin by dashed-slug. Your users can deposit, withdraw and transfer Bitcoins and other cryptocurrencies on your site. Free wallet adapter extensions You can extend this plugin to work with other coins if you install wallet adapters. There is a built-in wallet adapter that lets you connect with Bitcoin core and similar wallets, such as: Dogecoin core, Bitcoin ABC (Bitcoin Cash wallet), Litecoin core, etc. Any wallet that uses the Bitcoin core RPC API is compatible. The following wallet adapters are available for free to all dashed-slug subscribers. lnd and tapd Wallet Adapter extension – Connect to an lnd node, and perform transactions on the Bitcoin Lightning network. Also connect to a tapd node to mint and transact Taproot Assets. CoinPayments Adapter extension – Third-party wallet for many cryptocurrencies. Saves you from the hassle of hosting wallets on servers. But you don’t control the private keys. Monero Coin Adapter extension – Full node wallet adapter for Monero and its forks. TurtleCoin Adapter extension – Full node wallet adapter for TurtleCoin and its forks. You do not have to pay for membership to get the wallet adapters. Premium app extensions Premium dashed-slug members get unlimited access to download all the premium extensions: Exchange extension – Allows your users to enter market orders and exchange cryptocurrencies. Airdrop extension – Distribute coins or pay interest to your users by performing airdrops and recurring airdrops. Faucet extension – Reward your users for solving CAPTCHAs. Paywall extension – Let users pay for subscription to various user roles, and use shortcodes to control what content they see, based on these roles. Tip the Author extension – Allows users with cryptocurrency wallets to tip content authors. WooCommerce Cryptocurrency Payment Gateway extension – Let logged in users pay at WooCommerce checkout from their cryptocurrency wallet. Premium members get auto-updates for any installed extensions. See how to set up auto-updates. follow the slime Find the dashed-slug on the web: Twitter: https://twitter.com/DashedSlug RSS feed: https://www.dashed-slug.net/category/news/feed Youtube channel: https://www.youtube.com/dashedslugnet GitHub: https://github.com/dashed-slug Donating This is a free plugin built by the dashed-slug team! Bitcoin: 1DaShEDyeAwEc4snWq14hz5EBQXeHrVBxy Litecoin: LdaShEdER2UuhMPvv33ttDPu89mVgu4Arf Dogecoin: DASHEDj9RrTzQoJvP3WC48cFzUerKcYxHc
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C