Codemenschen
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Gift Vouchers | 3 | – | Jul 13, 2026 |
| Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) | 2 | – | Feb 20, 2025 |
| WP Virtual Room Configurator | 1 | – | Nov 19, 2024 |
Exploited and recent CVEs
- CVE-2026-57415 WordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-57412 WordPress Gift Vouchers plugin <= 4.6.9 - Broken Access Control vulnerability 0.3%
- CVE-2024-13520 Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates 0.3%
- CVE-2024-51907 WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-9165 Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
- CVE-2024-32436 WordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%