Advisories · Technology

VillaTheme GIFT4U.

Every CVE that names VillaTheme GIFT4U among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103357 CVE record

CVSS 6.9 Medium

WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
- VillaTheme GIFT4U
- Broken access control
Not analysed yet 10 Oct 2026
CVE-2026-57324 CVE record

CVSS 6.5 Medium

WordPress GIFT4U plugin <= 1.0.10 - Broken Access Control vulnerability
- VillaTheme GIFT4U
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-54809 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability
- VillaTheme GIFT4U
- SQL injection
Not analysed yet 17 Jun 2026