CVE-2026-88814
The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card's balance when it is redeemed
CVSS
—
Sem CVSS
EPSS
0.1%
p1
KEV
—
Exploit Today
0
0-100
Publicado: 5 de nov. de 2026 · Última mod.: 5 de nov. de 2026
Ainda não há histórico EPSS suficiente.
The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card's balance when it is redeemed at checkout, allowing an attacker who holds a gift card code to spend more than its funded value by submitting multiple checkouts for the same code at the same time.
Nenhum CVE relacionado por CWE ou produto.