3 matches found
CVE-2026-75861: Missing Authorization
The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to other users, zeroing their balance and crediting the value...
6.5CVSS5.8AI score0.00299EPSS
SaveExploits0References2
20