CVE-2026-88813

Name of the Vulnerable Software and Affected Versions YITH WooCommerce Gift Cards versions prior to 4.39.1

Description The plugin fails to reconcile the value of an issued gift card with the actual amount paid. Instead, it credits the card based on the item's pre-discount price. This allows users to apply a store coupon during checkout to obtain a gift card with a balance higher than the actual purchase price.

Recommendations Update YITH WooCommerce Gift Cards to version 4.39.1 or later.