Codemenschen

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Codemenschen records in CISA KEV

No Codemenschen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gift Vouchers 3 records HIGH

Records

3 records in Gift Vouchers · all components

TI-2023-13180 CVE-2023-28662 · GHSA-9c49-3qrv-gxfp

SQL injection in Gift Cards WordPress Plugin

HIGH 82

The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgv_doajax_voucher_pdf_save_func action.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.42186 Published 2023-03-22 No fix listed CWE-89

TI-2018-11556 CVE-2018-16159 · GHSA-6cfg-p9mx-f38q

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the…

HIGH 73

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.49481 Published 2018-08-30 No fix listed CWE-89

TI-2024-12561 CVE-2024-13520 · GHSA-54vp-p924-3592

Missing authorization in Codemenschen Gift Cards

LOW 30

The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'update_voucher_price', 'u…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2025-02-20 No fix listed CWE-862

Open these records in search →

Critical	2
High	1
Medium	5
Low	0
No CVSS	0