Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-103357 EUVD-2026-96378GHSA-mjgq-w7m7-mgch

WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3.

Affected products

VendorProductAffectedFixed
VillaTheme GIFT4U ≤ 1.1.3 —

References