Missing Authorization Vulnerability in VillaTheme GIFT4U Gift Cards Plugin
CVE-2026-103357

6.9MEDIUM

Key Information:

Vendor

WordPress
Status
Gift4u
Vendor
CVE Published:
10 October 2026

What is CVE-2026-103357?

The VillaTheme GIFT4U gift card plugin for WooCommerce contains a missing authorization vulnerability, allowing attackers to exploit incorrectly configured access controls. This vulnerability may lead to unauthorized access to sensitive functions, impacting the security and integrity of the application. It is critical for users to apply updates and implement necessary precautions to safeguard against potential exploits.

Affected Version(s)

GIFT4U 0 <= 1.1.3

References

https://patchstack.com/database/wordpress/plugin/gift4u-g...
vdb-entry

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

dcs | Patchstack Bug Bounty Program
.