CVE Browser

TodayOct 8th 98 Last 7 days 2,847 CISA KEV 1,734 Critical 42,694 All stats

Page 1

Vendor: Codemenschen Clear all

CVE-2026-57415 HIGH

WordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability

CVSS 7.1 EPSS 0.25% Jul 13, 2026

CVE-2026-57412 MEDIUM

WordPress Gift Vouchers plugin <= 4.6.9 - Broken Access Control vulnerability

CVSS 6.5 EPSS 0.33% Jul 13, 2026

CVE-2024-13520 MEDIUM

Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates

CVSS 5.3 EPSS 0.31% Feb 20, 2025

CVE-2024-51907 MEDIUM

WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

CVSS 6.5 EPSS 0.34% Nov 19, 2024

CVE-2024-9165 MEDIUM

Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

CVSS 6.4 EPSS 0.34% Oct 31, 2024

CVE-2024-32436 MEDIUM

WordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability

CVSS 4.3 EPSS 0.21% Apr 15, 2024

CVE-2023-28662 CRITICAL

The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template p…

CVSS 9.8 EPSS 42.19% Mar 22, 2023

CVE-2018-16159 CRITICAL

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template…

CVSS 9.8 EPSS 49.92% Aug 30, 2018

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2026-57415	WordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability	HIGH	7.1	0.25%	Jul 13, 2026
CVE-2026-57412	WordPress Gift Vouchers plugin <= 4.6.9 - Broken Access Control vulnerability	MEDIUM	6.5	0.33%	Jul 13, 2026
CVE-2024-13520	Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates	MEDIUM	5.3	0.31%	Feb 20, 2025
CVE-2024-51907	WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	MEDIUM	6.5	0.34%	Nov 19, 2024
CVE-2024-9165	Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	MEDIUM	6.4	0.34%	Oct 31, 2024
CVE-2024-32436	WordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability	MEDIUM	4.3	0.21%	Apr 15, 2024
CVE-2023-28662	The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template p…	CRITICAL	9.8	42.19%	Mar 22, 2023
CVE-2018-16159	The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template…	CRITICAL	9.8	49.92%	Aug 30, 2018

Rows per page

Showing 1 to 8 CVEs · page 1