Vulnerabilities

TI-2025-04574 CVE-2025-5103 · GHSA-gh3g-9366-jh5q

SQL injection in WP Swings Ultimate Gift Cards for WooCommerce

LOW 23

The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to boolean-based SQL Injection via the 'default_price' and 'product_id' parameters in all versions up to, and including, 3.1.4 due to insufficien…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00396 Published 2025-06-03 No fix listed CWE-89

TI-2021-03248 CVE-2021-4391 · GHSA-f3xx-5374-9242

Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass

LOW 21

The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-07-01 No fix listed CWE-352

Vulnerabilities

Filters

SQL injection in WP Swings Ultimate Gift Cards for WooCommerce

Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass