CVE-2024-1857: Wpswings Ultimate Gift Cards For Woocommerce

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the wps_wgm_preview_email_template(). This makes it possible for unauthenticated attackers to read password protected and draft posts that may contain sensitive data.

Affected products

• Wpswings Ultimate Gift Cards For Woocommerce: up to and including 2.6.6

Published 2024-03-16. Last modified 2026-06-17.