CVE-2026-88813
YITH WooCommerce Gift Cards <= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted Purchase
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The YITH WooCommerce Gift Cards WordPress plugin through 4.39.0 does not reconcile the value of a gift card it issues against the amount actually paid for it, instead crediting the new card with the item's pre-discount price, which allows customers to apply an ordinary store coupon at checkout and receive a gift card worth more than they paid.
| Vendor | unknown |
| Product | yith woocommerce gift cards |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown yith woocommerce gift cards
Be the first to know when new unknown vulnerabilities affecting unknown yith woocommerce gift cards are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / YITH WooCommerce Gift Cards
0 ≤ 4.39.0
References
Credits
Guillermo Álvarez Fernández WPScan