CVE-2023-5703

CVE-2023-5703: Gift Up Gift Cards for WordPress and WooCommerce is vulnerable to stored XSS via the giftup shortcode in all versions up to 2.20.1 due to insufficient input sanitization and output escaping of user attributes. Exploitation requires authenticated attackers with contributor-level per...

CVE-2023-49744

CVE-2023-49744 describes a Cross-Site Request Forgery in the Gift Up Gift Cards for WordPress and WooCommerce plugin, affecting versions up to and including 2.21.3. The vulnerability allows unauthenticated attackers to perform state-changing actions via forged requests to the plugin’s consume_pos...