https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T06:15:32.312092+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3459 CVE-2022-3459 — WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding 2026-10-15T06:15:32.331025+00:00

Affected: ankitpokhrel WooCommerce Multiple Free Gift, lilmonkee woocommerce_multiple_free_gift

The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin not enforcing server-side checks on the products that can be added as a gift. This makes it possible for unauthenticated attackers to add non-gift items to their cart as a gift.