CVE-2024-8425

Wordpress WooCommerce Ultimate Gift Card = 2.6.0 - Subida Arbitraria de Archivos No Autenticada CVE-2024-8425 El plugin WooCommerce Ultimate Gift Card para WordPress es vulnerable a subidas arbitrarias de archivos debido a una validación insuficiente del tipo de archivo en las funciones...

WooCommerce Ultimate Gift Card ≤ 2.6.0 - Arbitrary File Upload

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and 'mwbwgmwoocommerceaddcartitemdata' functions in all versions up to, and including, 2.6.0. This makes it possible for...

CVE-2026-91020

The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the...

CVE-2026-91020 WebToffee Gift Cards for WooCommerce < 1.3.1 - Unauthenticated Gift Card Amount Manipulation via wt_credit_amount

The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the...

CVE-2026-91020 WebToffee Gift Cards for WooCommerce < 1.3.1 - Unauthenticated Gift Card Amount Manipulation via wt_credit_amount

The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the...

WordPress WebToffee Gift Cards for WooCommerce plugin < 1.3.1 - Unauthenticated Gift Card Amount Manipulation vulnerability

Unauthenticated Gift Card Amount Manipulation vulnerability discovered by berke bodur in WordPress Plugin WebToffee Gift Cards for WooCommerce versions 1.3.1...

CVE-2024-11423

CVE-2024-11423 Ultimate Gift Cards for WooCommerce = 3.0.6 - Missing Authorization to Infinite Money Glitch Description The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and U...

CVE-2026-19436

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

EUVD-2026-75260

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

CVE-2026-19436 Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

CVE-2026-19436

The Ultimate Gift Cards for WooCommerce WordPress plugin (versions before 3.2.10 ) contains a vulnerability where it fails to reconcile the issued gift card coupon value against the actual amount collected at checkout. This flaw allows unauthenticated users to perform a Gift Card Value Inflation ...

WordPress Ultimate Gift Cards for WooCommerce plugin 3.0.3-3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure vulnerability

Unauthenticated Gift Card Code and Customer PII Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin Ultimate Gift Cards For WooCommerce versions 3.0.3-3.2.9...

CVE-2026-19436 Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

WordPress Ultimate Gift Cards for WooCommerce plugin < 3.2.10 - Unauthenticated Gift Card Value Inflation vulnerability

Unauthenticated Gift Card Value Inflation vulnerability discovered by Guillermo Álvarez Fernández in WordPress Plugin Ultimate Gift Cards For WooCommerce versions 3.2.10...

CVE-2026-19439

The Ultimate Gift Cards for WooCommerce WordPress plugin is vulnerable to an unauthenticated information disclosure vulnerability in versions prior to 3.2.10 . The root cause is a lack of authorization checks when displaying gift card details via the wps_uwgc_report_details endpoint. Attackers ca...

PT-2026-89288

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

CVE-2026-19439: Exposure of Sensitive Information to an Unauthorized Actor

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

PT-2026-89289

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

CVE-2026-75861

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to other users, zeroing their balance and crediting the value...

EUVD-2026-74703

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to other users, zeroing their balance and crediting the value...