CVE-2026-88814
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 05, 2026
Vendor
unknown
Description
The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card's balance when it is redeemed at checkout, allowing an attacker who holds a gift card code to spend more than its funded value by submitting multiple checkouts for the same code at the same time.