Codemenschen

Products

ProductCVEsExploitedLatest
Gift Vouchers3–Jul 13, 2026
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported)2–Feb 20, 2025
WP Virtual Room Configurator1–Nov 19, 2024

Exploited and recent CVEs

  • CVE-2026-57415 High 7.1 WordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57412 Medium 6.5 WordPress Gift Vouchers plugin <= 4.6.9 - Broken Access Control vulnerability 0.3%
  • CVE-2024-13520 Medium 5.3 Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates 0.3%
  • CVE-2024-51907 Medium 6.5 WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-9165 Medium 6.4 Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-32436 Medium 4.3 WordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%