Unknown Ultimate Gift Cards For Woocommerce vulnerabilities

3 CVEs affecting Unknown Ultimate Gift Cards For Woocommerce, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-19439, published 2026-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-75861, published 2026-09-09. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a…
CVE-2026-19439, published 2026-09-10. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift…
CVE-2026-19436, published 2026-09-10. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing…