CVE-2024-58248

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards...

PT-2025-16623

Name of the Vulnerable Software and Affected Versions nopCommerce versions prior to 4.80.0 Description The issue is related to a race condition that allows for the duplicate redeeming of gift cards due to the lack of locking for order placement. Recommendations For versions prior to 4.80.0, updat...

CVE-2025-31781

Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Cards for WooCommerce: from n/a through = 1.5.8...

CVE-2025-2483

CVE-2025-2483 affects the Gift Certificate Creator plugin for WordPress. It allows a Reflected Cross-Site Scripting (XSS) via the receip_address parameter in all versions up to 1.1.0. The issue enables unauthenticated attackers to inject arbitrary scripts into pages that execute when a user perfo...

CVE-2025-2483 Gift Certificate Creator <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter

The Gift Certificate Creator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘receipaddress’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

WordPress plugin Gift Certificate Creator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-14472 · WordPress · Gift Certificate Creator

Name of the Vulnerable Software and Affected Versions: The Gift Certificate Creator plugin for WordPress versions up to, and including, 1.1.0 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

WordPress Gift Certificate Creator plugin <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter vulnerability

Reflected Cross-Site Scripting via receipaddress Parameter vulnerability discovered by johska in WordPress Plugin Gift Certificate Creator versions = 1.1.0...

WordPress Gift Cards for WooCommerce plugin <= 1.5.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Gift Cards for WooCommerce versions = 1.5.8...

CVE-2025-31781 WordPress Gift Cards for WooCommerce plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Cards for WooCommerce: from n/a through = 1.5.8...

CVE-2025-31781

CVE-2025-31781 describes a Missing Authorization vulnerability in the Gift Cards for WooCommerce plugin. Affected software: Gift Cards for WooCommerce, versions up to 1.5.8 (inclusive); impact as stated: limited confidentiality/integrity impact (I: Low, I/L: Low, A: None) with a network attack ve...

CVE-2025-31781 WordPress Gift Cards for WooCommerce plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Cards for WooCommerce: from n/a through = 1.5.8...

WordPress plugin Gift Cards for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-14167 · Woocommerce · Gift Cards For Woocommerce

Name of the Vulnerable Software and Affected Versions: ahmadshyk Gift Cards for WooCommerce versions 1.5.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendation...

CVE-2025-30923

Cross-Site Request Forgery CSRF vulnerability in powerfulwp Gift Message for WooCommerce gift-message-for-woocommerce allows Cross Site Request Forgery.This issue affects Gift Message for WooCommerce: from n/a through = 1.7.8...

WordPress Gift Message for WooCommerce plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mika in WordPress Plugin Gift Message for WooCommerce versions = 1.7.8...

CVE-2025-30923

Cross-Site Request Forgery CSRF vulnerability in powerfulwp Gift Message for WooCommerce gift-message-for-woocommerce allows Cross Site Request Forgery.This issue affects Gift Message for WooCommerce: from n/a through = 1.7.8...

CVE-2025-30923

Cross-Site Request Forgery CSRF vulnerability in powerfulwp Gift Message for WooCommerce gift-message-for-woocommerce allows Cross Site Request Forgery.This issue affects Gift Message for WooCommerce: from n/a through = 1.7.8...

CVE-2025-30923 WordPress Gift Message for WooCommerce plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in powerfulwp Gift Message for WooCommerce gift-message-for-woocommerce allows Cross Site Request Forgery.This issue affects Gift Message for WooCommerce: from n/a through = 1.7.8...

CVE-2025-30923

CVE-2025-30923 is a CSRF vulnerability in Gift Message for WooCommerce (WordPress plugin) affecting Gift Message for WooCommerce versions from n/a through 1.7.8. The core issue is Cross-Site Request Forgery with a CVSS v3.1 base score of 4.3 (Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). Exploita...