Medium 5.3
2026-02-19< 3.2.5
CVE-2026-24375
Minimum safe version
3.2.5
Update to 3.2.5 or later to address 9 fixable vulnerabilities
CVE-2026-24375
Ultimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function
CVE-2024-11423
CVE-2024-1857
CVE-2021-4391
CVE-2021-4342
Various Affected Software (Various Versions) - Cross-Site Request Forgery Bypass
CSRF Bypass in Multiple Plugins
WordPress Ultimate Gift Cards For WooCommerce plugin <= 2.1.1 - Cross-Site Request Forgery (CSRF) vulnerability