Threats tagged 'ghsa-j228-c9r3-cqm8'

The YITH WooCommerce Gift Cards WordPress plugin through version 4.39.0 has a vulnerability where it issues gift cards credited with the item's pre-discount price rather than the amount actually paid. This allows customers to combine store coupons with gift card purchases to obtain gift cards worth more than their payment.