This vulnerability in the Gift Cards for WooCommerce plugin by ahmadshyk is due to missing authorization checks, which allows users with limited privileges to perform actions they should not be authorized to do. It affects all versions up to 1.5.8. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges, but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. No vendor advisory or patch information is currently provided.

The vulnerability allows unauthorized modification of data within the affected plugin, potentially enabling privilege escalation or unauthorized changes to gift card data. There is no impact on confidentiality or availability. The CVSS score of 4.3 reflects a medium severity risk due to the integrity impact and low attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's functionality to trusted users only and monitor for unusual activity related to gift card management. Avoid granting unnecessary privileges to users who can interact with the plugin.