Gift Vouchers vulnerabilities

2 known vulnerabilities in Gift Vouchers from Codemenschen. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Gift Vouchers: Improper Neutralization of Input During Web Page Generation

  CVE-2026-57415Jul 13, 2026Codemenschen

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS.This issue affects Gift Vouchers: from n/a through <= 4.7.0.

• 9.8 Critical severity

  Gift Cards (Gift Vouchers and Packages)…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-28662Mar 22, 2023Gift Cards (Gift Vouchers and Packages) WordPress PluginEPSS 42.2%

  The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgv_doajax_voucher_pdf_save_func action.