CVE-2026-57415 WordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS.This issue affects Gift Vouchers: from n/a through = 4.7.0...

WordPress Gift Vouchers Plugin <= 4.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Gift Vouchers Type Plugin Vulnerable versions = 4.4.4 Fixed in 4.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9165 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 05e5caabd7d5 Credits Francesco Carlucci Require...

WordPress Gift Vouchers Plugin <= 4.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Gift Vouchers Type Plugin Vulnerable versions = 4.4.0 Fixed in 4.4.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32436 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID edd7e38ceffb Credits Dhabaleshwar Das...

WordPress Gift Vouchers SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports personal blog sites on servers running PHP and MySQL.The Gift Vouchers plugin is an e-gift voucher plugin that is used in... A SQL injection vulnerability exists in the...