Known vulnerabilities in Ultimate Gift Cards for WooCommerce

Create, sell and manage WooCommerce gift cards to attract more sales and multiply your revenue at your online store.

9Reported vulnerabilities

7.5Highest CVSS score

3.2.9Latest version

7,000+Active installs

What to do now

Update Ultimate Gift Cards for WooCommerce to 3.2.10 or later. 9 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 31, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2021-4391	Medium 4.3	0.5%	Before 2.1.2	`2.1.2`	July 1, 2023
CVE-2024-11423	High 7.5	0.8%	0 to 2.9.1 (inclusive) 0 to 3.0.6 (inclusive)	`3.0.7`	January 8, 2025
CVE-2026-19439	Medium 5.3	0.3%	3.0.3 to 3.2.9 (inclusive)	`3.2.10`	September 10, 2026
CVE-2026-19436	Medium 5.3	0.2%	Before 3.2.10	`3.2.10`	September 8, 2026
CVE-2026-84760	Medium 5.3	0.3%	3.2.9 and earlier	`3.2.10`	September 2, 2026
CVE-2026-24375	Medium 5.3	0.2%	3.2.4 and earlier	`3.2.5`	January 8, 2026
CVE-2024-1857	Medium 5.3	0.3%	2.6.6 and earlier	`2.6.7`	March 15, 2024
CVE-2025-5103	Medium 4.9	0.4%	Before 3.1.5	`3.1.5`	June 3, 2025
CVE-2026-75861	Medium 4.3	0.3%	3.2.9 and earlier	`3.2.10`	September 7, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.