Vulnerabilities / Free Gifts for WooCommerce
Free Gifts for WooCommerce vulnerabilities
Advisories WPSec published for GIFTiT – Free Gifts for WooCommerce. Other sources may list more. Its attack surface: Free Gifts for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-30 | WPSEC-2026-2045 | Free Gifts for WooCommerce <= 4.5 - Unauthenticated Arbitrary Shortcode Execution via Gift Popup AJAX Handler | High 7.3 | 4.6 |
License: CC BY 4.0