Filtered by vendor Lilmonkee Subscriptions
Filtered by product Woocommerce Multiple Free Gift Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-3459 1 Lilmonkee 1 Woocommerce Multiple Free Gift 2024-09-27 5.3 Medium
The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin not enforcing server-side checks on the products that can be added as a gift. This makes it possible for unauthenticated attackers to add non-gift items to their cart as a gift.