Veille CVE

Recherche « Unknown WebToffee Gift Cards for WooCommerce »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown WebToffee Gift Cards for WooCommerce » ✕
  1. CVE-2026-91020 5.3 Moyenne

    Unknown WebToffee Gift Cards for WooCommerce

    The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the configured denominations and manipulating the order total to obtain products without paying.