Codemenschen

8 CVEs across 4 Codemenschen products. Browse Codemenschen vulnerabilities, severities, and proof-of-concept exploits.

Codemenschen products with known CVEs

ProductCVEs
Gift Vouchers3
Gift Vouchers3
Gift Cards (Gift Vouchers And Packages) (Woocommerce Supported)2
Wp Virtual Room Configurator1
Codemenschen CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57415High7.12026-07-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS…
CVE-2026-57412Medium6.52026-07-13Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2024-13520Medium5.32025-02-20The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to…
CVE-2024-51907Medium6.52024-11-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen WP Virtual Room Configurator configure-confe…
CVE-2024-9165Medium6.42024-10-31The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in a…
CVE-2024-32436Medium4.32024-04-15Cross-Site Request Forgery (CSRF) vulnerability in Codemenschen Gift Vouchers.This issue affects Gift Vouchers: from n/a through 4.4.0.
CVE-2023-28662Critical9.82023-03-22The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template p…
CVE-2018-16159Critical9.82018-08-30The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template…