High severity7.5NVD Advisory· Published Sep 10, 2026· Updated Sep 10, 2026
CVE-2026-19436
CVE-2026-19436
Description
The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<3.2.10+ 1 more
- (no CPE)range: <3.2.10
- (no CPE)range: <3.2.10
Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)Wordfence Blog · Sep 17, 2026