Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ultimate Gift Cards for WooCommerce 3.2.10 Clear all filters
TI-2026-15846 CVE-2026-19439 · GHSA-8q26-cm5x-3vpp

Information disclosure in Ultimate Gift Cards for WooCommerce

Priority LOW 39

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitr…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00434 Published 2026-09-10 Fixed in 3.2.10 CWE-200
TI-2026-15843 CVE-2026-19436 · GHSA-5j4r-9728-477v

Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

Priority LOW 39

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00358 Published 2026-09-10 Fixed in 3.2.10 CWE-284