CVE-2024-11423

CVE-2024-11423 Ultimate Gift Cards for WooCommerce = 3.0.6 - 未授权访问导致无限金钱漏洞 描述 适用于 WordPress 的 Ultimate Gift Cards for WooCommerce 插件（用于创建 WooCommerce 礼品卡、礼品券，兑换和管理数字礼品优惠券；提供礼品证书、定时发送礼品卡，并使用带个性化模板的高级优惠券）在直至 3.0.6 的所有版本中，由于多个 REST API 端点（例如...

WordPress Ultimate Gift Cards For WooCommerce plugin < 3.2.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Ultimate Gift Cards For WooCommerce versions 3.2.10...

CVE-2026-19436

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

CVE-2026-19439

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

WordPress Ultimate Gift Cards for WooCommerce plugin 3.0.3-3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure vulnerability

Unauthenticated Gift Card Code and Customer PII Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin Ultimate Gift Cards For WooCommerce versions 3.0.3-3.2.9...

CVE-2026-19436 Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

CVE-2026-19439 Ultimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure via wps_uwgc_report_details

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

CVE-2026-19436

The Ultimate Gift Cards for WooCommerce WordPress plugin (versions before 3.2.10 ) contains a vulnerability where it fails to reconcile the issued gift card coupon value against the actual amount collected at checkout. This flaw allows unauthenticated users to perform a Gift Card Value Inflation ...

CVE-2026-19439

The Ultimate Gift Cards for WooCommerce WordPress plugin is vulnerable to an unauthenticated information disclosure vulnerability in versions prior to 3.2.10 . The root cause is a lack of authorization checks when displaying gift card details via the wps_uwgc_report_details endpoint. Attackers ca...

EUVD-2026-75261

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

CVE-2026-19439 Ultimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure via wps_uwgc_report_details

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

CVE-2026-19436 Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

WordPress Ultimate Gift Cards for WooCommerce plugin < 3.2.10 - Unauthenticated Gift Card Value Inflation vulnerability

Unauthenticated Gift Card Value Inflation vulnerability discovered by Guillermo Álvarez Fernández in WordPress Plugin Ultimate Gift Cards For WooCommerce versions 3.2.10...

EUVD-2026-75260

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

PT-2026-89288

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

PT-2026-89289

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

CVE-2026-19436: Improper Access Control

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

CVE-2026-19439: Exposure of Sensitive Information to an Unauthorized Actor

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9...

CVE-2026-75861

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to other users, zeroing their balance and crediting the value...

CVE-2026-75861 Ultimate Gift Cards for WooCommerce < 3.2.10 - Subscriber+ Gift Card Theft and Destruction via Unauthorized Redemption

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to other users, zeroing their balance and crediting the value...