https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:23:58 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-19439 <p>The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9, the live redemption code, which anyone holding it can spend.</p> <p>Versions from 3.0.3 to 3.2.8 disclose the same data without the redemption code.</p> <p>The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9, the live redemption code, which anyone holding it can spend.</p> <p>Versions from 3.0.3 to 3.2.8 disclose the same data without the redemption code.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-19439 https://vulnerability.circl.lu/vuln/ghsa-8q26-cm5x-3vpp <p>The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9, the live redemption code, which anyone holding it can spend.</p> <p>Versions from 3.0.3 to 3.2.8 disclose the same data without the redemption code.</p> <p>The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disclose customer personal data, balances, dates and, in 3.2.9, the live redemption code, which anyone holding it can spend.</p> <p>Versions from 3.0.3 to 3.2.8 disclose the same data without the redemption code.</p> https://vulnerability.circl.lu/vuln/ghsa-8q26-cm5x-3vpp