Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Codemenschen Component: Gift Vouchers Clear all filters
TI-2024-12561 CVE-2024-13520 · GHSA-54vp-p924-3592

Missing authorization in Codemenschen Gift Cards

Priority LOW 30

The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'update_voucher_price', 'u…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2025-02-20 No fix listed CWE-862
TI-2023-13180 CVE-2023-28662 · GHSA-9c49-3qrv-gxfp

SQL injection in Gift Cards WordPress Plugin

Priority HIGH 82

The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgv_doajax_voucher_pdf_save_func action.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.42186 Published 2023-03-22 No fix listed CWE-89