CVE-2026-103357CWE-862broken-access-control

CVE-2026-103357

published October 10, 2026

CVSS
6.9
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-10-10T21:16Z
References (1)
https://patchstack.com/database/wordpress/plugin/gift4u-gift-cards-all-in-one-for-woo/vulnerability/wordpress-gift4u-plugin-1-1-3-broken-access-control-vulnerability?_s_id=cve · [email protected]
EPSS history
Timeline
  • 12 OCT 03:26Z
    EPSS moved — → 0%
    epss
  • 10 OCT 17:00Z
    WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
    cvelistv5
  • 10 OCT 17:00Z
    WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
    cvelistv5