Unrated severityNVD Advisory· Published Sep 10, 2026

CVE-2026-19436

Description

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Ultimate Gift Cards For Woocommerceinferred2 versions
<3.2.10+ 1 more
- (no CPE)range: <3.2.10
- (no CPE)range: <3.2.10
Package: https://wordpress.org/plugins/ultimate-gift-cards-for-woocommerce

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/7c2f56f6-9c0a-4de2-9cd2-9c25a25c3530/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000