Codemenschen
5 CVEs across 4 Codemenschen products. Browse Codemenschen vulnerabilities, severities, and proof-of-concept exploits.
Codemenschen products with known CVEs
Codemenschen CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-57415 | High | 7.1 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS… |
CVE-2026-57412 | Medium | 6.5 | 2026-07-13 | Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2024-13520 | Medium | 5.3 | 2025-02-20 | The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to… |
CVE-2024-51907 | Medium | 6.5 | 2024-11-19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen WP Virtual Room Configurator configure-confe… |
CVE-2024-9165 | Medium | 6.4 | 2024-10-31 | The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in a… |
CVE-2024-32436 | Medium | 4.3 | 2024-04-15 | Cross-Site Request Forgery (CSRF) vulnerability in Codemenschen Gift Vouchers.This issue affects Gift Vouchers: from n/a through 4.4.0. |
CVE-2023-28662 | Critical | 9.8 | 2023-03-22 | The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template p… |
CVE-2018-16159 | Critical | 9.8 | 2018-08-30 | The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template… |