WordPress plugin
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High1
- Medium5
- Low0
All Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤4.6.9Update to 4.7.0 | CVE-2026-57412 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤4.7.0Update to 4.7.1 | CVE-2026-57415 | |
| Medium5.3 | Missing Authorization to Unauthenticated Price, Date, and Note Updates ≤4.4.9Update to 4.5.0 | CVE-2024-13520 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ≤4.4.4Update to 4.4.5 | CVE-2024-9165 | |
| Medium4.3 | Cross-Site Request Forgery ≤4.4.0Update to 4.4.1 | CVE-2024-32436 | |
| Medium4.3 | Cross-Site Request Forgery in new_voucher_template.php ≤4.3.5Update to 4.3.6 | — | |
| Critical9.8 | Unauthenticated SQL Injection ≤4.3.2Update to 4.3.3 | CVE-2023-28662 | |
| Critical9.8 | SQL Injection <4.1.8Update to 4.1.8 | CVE-2018-16159 |
- Medium5.3Missing Authorization
≤4.6.9Update to 4.7.0
- High7.2Unauthenticated Stored Cross-Site Scripting
≤4.7.0Update to 4.7.1
- Medium5.3Missing Authorization to Unauthenticated Price, Date, and Note Updates
≤4.4.9Update to 4.5.0
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
≤4.4.4Update to 4.4.5
- Medium4.3Cross-Site Request Forgery
≤4.4.0Update to 4.4.1
- Medium4.3Cross-Site Request Forgery in new_voucher_template.php
≤4.3.5Update to 4.3.6
- Critical9.8Unauthenticated SQL Injection
≤4.3.2Update to 4.3.3
- Critical9.8SQL Injection
<4.1.8Update to 4.1.8
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported): common questions
Does Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported): 2 critical, 1 high, 5 medium. None are known to affect version null.
How do I check which version of Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) vulnerability?
CVE-2026-57412, published Jul 8, 2026: Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.6.9 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) vulnerability listed in CISA KEV?
No. None of the known Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) vulnerabilities is currently listed in the CISA KEV catalog.