CVE-2024-1857 | BDVDB-2026-227693 Detail

Description#

The Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the wps_wgm_preview_email_template(). This makes it possible for unauthenticated attackers to read password protected and draft posts that may contain sensitive data.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-03-16Record published in the CVE List.
2. Version 22026-04-08Most recent update recorded in the CVE List.