Threats tagged 'ghsa-r9cj-c36h-r5w3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-88814The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card's High2026-11-05GCVE DatabaseCVE-2026-88814 A vulnerability in the YITH WooCommerce Gift Cards WordPress plugin versions before 4.38.1 allows attackers to redeem a gift card multiple times concurrently, spending more than the card's funded value. This occurs because the plugin does not lock or atomically update the gift card balance during checkout. Report on CVE-2026-88814 Vulnerability #ghsa-r9cj-c36h-r5w3	GCVE Database	2026-11-05

Page 1 of 1