CVE-2024-1857 in Ultimate Gift Cards for WooCommerce Plugin
Résumé
par MITRE • 16/03/2024
The Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the wps_wgm_preview_email_template(). This makes it possible for unauthenticated attackers to read password protected and draft posts that may contain sensitive data.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.