Ultimate Gift Cards for WooCommerce vulnerabilities
We track 2 vulnerabilities in Ultimate Gift Cards for WooCommerce products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Ultimate Gift Cards for WooCommerce vulnerabilities
- 7.5 High severity
Ultimate Gift Cards for WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor
The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer persona
- 7.5 High severity
Ultimate Gift Cards for WooCommerce: Improper Access Control
The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they