Medium 5.4
2026-03-13< 3.1.8
CVE-2026-32412
Minimum safe version
3.1.8
Update to 3.1.8 or later to address 4 fixable vulnerabilities
CVE-2026-32412
CVE-2023-49744
Gift Up 2.21.3 - Cross-Site Request Forgery via consume_post
WordPress Gift Up Gift Cards for WordPress and WooCommerce Plugin <= 2.20.1 is vulnerable to Cross Site Scripting (XSS)