VillaTheme GIFT4U vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting VillaTheme GIFT4U: 3 record(s), with affected versions and fixes.

CVE-2026-103357 Medium · 6.9 CWE-862 Oct 10, 2026

WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3.

CVE-2026-57324 Medium · 6.5 CWE-862 Jun 26, 2026

WordPress GIFT4U plugin <= 1.0.10 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.

CVE-2026-54809 Critical · 9.3 CWE-89 Jun 17, 2026

WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme GIFT4U allows Blind SQL Injection. This issue affects GIFT4U: from n/a through 1.0.10.