yith_woocommerce_gift_cards vulnerabilities

CVEs whose affected-version data names the yith_woocommerce_gift_cards package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-88814Low· 3.7

2d ago

YITH WooCommerce Gift Cards < 4.38.1 - Unauthenticated Gift Card Balance Double-Spending via Race Condition

The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card's balance when it is redeemed at checkout, allowing an attacker who holds a gift card code to spend more than its funded value …

▾ SunlitEPSS 0.13%via CVEORG