Canonical URL: https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/ --- description: WPScan published September advisories covering gift-card value inflation, exposed redemption details and missing ownership checks in Ultimate Gift Cards for WooCommerce. title: Security disclosures identify value and redemption flaws in WooCommerce gift-card plugin image: https://giftcard.news/images/social/v1/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-e5965253362361cc5642b9ea6f67087e.jpg --- 1. [Home](https://giftcard.news/) 2. [Fraud & Security](https://giftcard.news/fraud-security/) # Security disclosures identify value and redemption flaws in WooCommerce gift-card plugin WPScan published September advisories covering gift-card value inflation, exposed redemption details and missing ownership checks in Ultimate Gift Cards for WooCommerce. By [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) September 7, 2026 3 min read [ Google News ](https://google.com/preferences/source?q=giftcard.news&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fultimate-gift-cards-woocommerce-security-disclosures%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Security+disclosures+identify+value+and+redemption+flaws+in+WooCommerce+gift-card+plugin&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fultimate-gift-cards-woocommerce-security-disclosures%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Security+disclosures+identify+value+and+redemption+flaws+in+WooCommerce+gift-card+plugin+https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fultimate-gift-cards-woocommerce-security-disclosures%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") ![Customer hands holding a blue card at a retail payment terminal](https://giftcard.news/images/variants/v1/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands-w1280.webp) Illustrative card transaction; not a photograph of an affected customer, website or security incident. Photo: SpotOn / Unsplash [WPScan](https://giftcard.news/company/wpscan/) published three September disclosures about Ultimate Gift Cards for WooCommerce, identifying weaknesses affecting issued value, customer information and the right to redeem a card. ## Technical severity and the conditions behind the scores WPScan rates unauthorized redemption at 6.5, or medium severity, and both value inflation and information disclosure at 7.5, or high severity. The official records contain matching CVSS v3.1 assessments from CISA. These scores describe intrinsic technical characteristics, rather than evidence of retailer losses or attacks in progress.[ \[S01\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-1)[ \[S02\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-2)[ \[S03\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-3)[ \[S05\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-5)[ \[S06\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-6)[ \[S07\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-7) The data behind the story ### Published CVSS v3.1 base scores for the three gift-card vulnerabilities The scores in WPScan’s disclosures agree with the CISA assessments in the official CVE records, checked October 19, 2026. CVSS v3.1 base score CVSS v3.1 points (0–10) Tap or hover for details. All values are also available in the data table. Sources WPScan: CVE-2026-75861; WPScan: CVE-2026-19436; WPScan: CVE-2026-19439; [\[S05\]](#article-source-5) CVE-2026-75861 official record and CISA CVSS assessment; [\[S06\]](#article-source-6) CVE-2026-19436 official record and CISA CVSS assessment; [\[S07\]](#article-source-7) CVE-2026-19439 official record and CISA CVSS assessment Base severity scores are not attack probabilities, loss estimates, numbers of affected stores or incident counts. A 7.5 score does not establish a proportional increase in harm over 6.5\. Site configuration, companion plugins and access conditions matter; no exploitation was attempted. Show data tableHide data table Scroll left or right to see all columns __Published CVSS v3.1 base scores for the three gift-card vulnerabilities (CVSS v3.1 points (0–10))__ | Category | CVSS v3.1 base score | | ------------------------------------------- | --------------------------- | | CVE-2026-75861: unauthorized redemption | 6.5 CVSS v3.1 points (0–10) | | CVE-2026-19436: gift-card value inflation | 7.5 CVSS v3.1 points (0–10) | | CVE-2026-19439: details and code disclosure | 7.5 CVSS v3.1 points (0–10) | The first advisory, published September 7 [\[S01\]](#article-source-1), concerns missing recipient checks. It says an authenticated user could redeem another person's card through affected integrations with companion plugins. One path had already received an ownership check in version 3.2.9, while another remained affected. A September 8 disclosure [\[S02\]](#article-source-2) describes a separate failure to reconcile issued gift-card value with the amount collected at checkout, allowing excess store credit to be created. The third advisory, also dated September 8 [\[S03\]](#article-source-3), covers access to gift-card details without authorisation. WPScan says affected versions exposed personal data, balances and dates; version 3.2.9 also exposed a usable redemption code. WPScan identifies version 3.2.10 as the fixed release for all three issues. The vendor's WordPress changelog [\[S04\]](#article-source-4), however, lists the same vulnerability identifiers under version 3.2.11, dated September 7\. The sources do not explain that difference. These are newly published security findings, not evidence that a particular retailer suffered theft. The advisories do not quantify losses or identify affected merchants. The operational concern is specific: gift-card value must remain tied to paid amounts, authorised access and the intended recipient. The published scoring vectors make the access distinction visible. For CVE-2026-75861, the vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. For CVE-2026-19436, it is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. The first assumes low privileges; the second does not require privileges. These assessments concern integrity and do not quantify stolen value.[ \[S05\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-5)[ \[S06\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-6) CVE-2026-19439 uses CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, reflecting the assessed confidentiality impact. CVSS is owned by FIRST and used by permission. Its base score is one input into a security assessment, not a complete measure of risk for an individual store.[ \[S07\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-7)[ \[S08\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-8) The CVE records were published on September 9 and 10, after WPScan’s September 7 and 8 advisory dates. Their affected-version boundaries match WPScan, but do not resolve the different fix version in the vendor changelog. The current WordPress listing shows release 3.2.12 dated September 15; that later listing is distinct from evidence about which earlier release first corrected each flaw.[ \[S04\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-4)[ \[S05\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-5)[ \[S06\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-6)[ \[S07\]](https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-source-7) ## In this article ### Companies * [WPScan](https://giftcard.news/company/wpscan/) ### Sources and documents * [\[S01\] Original primary announcement](https://wpscan.com/vulnerability/a08125a6-e528-49f1-82c4-191df80af26c/?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — WPScan * [\[S02\] Official supporting context](https://wpscan.com/vulnerability/7c2f56f6-9c0a-4de2-9cd2-9c25a25c3530/?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — WPScan * [\[S03\] Official supporting context](https://wpscan.com/vulnerability/daefdabe-2277-4753-9df5-581134540000/?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — WPScan * [\[S04\] Official supporting context](https://wordpress.org/plugins/woo-gift-cards-lite/?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — WP Swings * [\[S05\] CVE-2026-75861 official record and CISA CVSS assessment](https://cveawg.mitre.org/api/cve/CVE-2026-75861?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — CVE Program / CISA-ADP * [\[S06\] CVE-2026-19436 official record and CISA CVSS assessment](https://cveawg.mitre.org/api/cve/CVE-2026-19436?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — CVE Program / CISA-ADP * [\[S07\] CVE-2026-19439 official record and CISA CVSS assessment](https://cveawg.mitre.org/api/cve/CVE-2026-19439?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — CVE Program / CISA-ADP * [\[S08\] CVSS v3.1 User Guide](https://www.first.org/cvss/v3.1/user-guide?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — FIRST Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fultimate-gift-cards-woocommerce-security-disclosures%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Security+disclosures+identify+value+and+redemption+flaws+in+WooCommerce+gift-card+plugin&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fultimate-gift-cards-woocommerce-security-disclosures%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Security+disclosures+identify+value+and+redemption+flaws+in+WooCommerce+gift-card+plugin+https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fultimate-gift-cards-woocommerce-security-disclosures%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") ![Portrait of Daniel Brooks](https://giftcard.news/images/variants/v1/daniel-brooks-editorial-portrait-w320.webp) About the author ## [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) Journalist — Payments, Security & PCI DSS Daniel Brooks covers payment networks, financial technology, payment security, gift card fraud and PCI DSS for Gift Card News. From reading to building ## Your next move in gift cards. Tell us what you’re building. We’ll help you explore suitable providers. [Find a provider ](https://giftcard.news/find-a-provider/) ## Related articles [Fraud & Security](https://giftcard.news/fraud-security/) News ### [giftee Group estimates JPY 550 million loss after unauthorized e-gift issuance](https://giftcard.news/fraud-security/giftee-unauthorized-egift-issuance-estimated-loss-2026/) [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 26, 2026 3 min [Fraud & Security](https://giftcard.news/fraud-security/) News ### [San Francisco settlement creates $1.525 million Vanilla gift-card fund](https://giftcard.news/fraud-security/san-francisco-vanilla-gift-card-restitution-fund/) [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 23, 2026 4 min [Fraud & Security](https://giftcard.news/fraud-security/) News ### [Valuedesign reports card-data leak as MOS resets PINs](https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/) [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 23, 2026 4 min ```json {"@context":"https://schema.org","@graph":[{"@type":"NewsMediaOrganization","@id":"https://giftcard.news/#publisher","name":"Gift Card News","url":"https://giftcard.news/","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","logo":{"@type":"ImageObject","url":"https://giftcard.news/icon-512.png","contentUrl":"https://giftcard.news/icon-512.png","width":512,"height":512,"@id":"https://giftcard.news/#logo"},"publishingPrinciples":"https://giftcard.news/editorial-policy/","correctionsPolicy":"https://giftcard.news/editorial-policy/"},{"@type":"WebSite","@id":"https://giftcard.news/#website","url":"https://giftcard.news/","name":"Gift Card News","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","inLanguage":"en","publisher":{"@id":"https://giftcard.news/#publisher"},"potentialAction":{"@type":"SearchAction","target":"https://giftcard.news/search/?q={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"Person","@id":"https://giftcard.news/author/daniel-brooks/#person","name":"Daniel Brooks","url":"https://giftcard.news/author/daniel-brooks/","description":"Daniel Brooks covers payment networks, financial technology, payment security, gift card fraud and PCI DSS for Gift Card News.","jobTitle":"Journalist — Payments, Security & PCI DSS","image":{"@type":"ImageObject","url":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp","contentUrl":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp","width":1254,"height":1254,"caption":"Illustrated portrait representing the Daniel Brooks editorial profile.","@id":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp#image","encodingFormat":"image/webp","description":"Illustrated portrait for Daniel Brooks, a Gift Card News editorial pen name","creditText":"Gift Card News / AI-generated illustration"}},{"@type":"ImageObject","url":"https://giftcard.news/images/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands.webp","contentUrl":"https://giftcard.news/images/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands.webp","width":1920,"height":1440,"caption":"Illustrative card transaction; not a photograph of an affected customer, website or security incident.","@id":"https://giftcard.news/images/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands.webp#image","encodingFormat":"image/webp","description":"Customer hands holding a blue card at a retail payment terminal","creditText":"SpotOn / Unsplash","isBasedOn":"https://unsplash.com/photos/customers-interacting-with-a-cashier-and-a-point-of-sale-system-u1DVI-1UUV8"},{"@type":"Dataset","@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#dataset","url":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/","name":"Security disclosures identify value and redemption flaws in WooCommerce gift-card plugin: figure data","description":"Tabular data for the figures accompanying \"Security disclosures identify value and redemption flaws in WooCommerce gift-card plugin\". Sources, units and limitations are documented with each figure.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article"},"isAccessibleForFree":false,"hasPart":[{"@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-figure-1-dataset"}],"distribution":{"@type":"DataDownload","contentUrl":"https://giftcard.news/download.csv?article=%2Ffraud-security%2Fultimate-gift-cards-woocommerce-security-disclosures%2F","encodingFormat":"text/csv","isAccessibleForFree":false}},{"@type":"Dataset","@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-figure-1-dataset","url":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article-figure-1","name":"Published CVSS v3.1 base scores for the three gift-card vulnerabilities","description":"Tabular values displayed in the figure \"Published CVSS v3.1 base scores for the three gift-card vulnerabilities\" and its accompanying data table.\n\nThe scores in WPScan’s disclosures agree with the CISA assessments in the official CVE records, checked October 19, 2026.\n\nBase severity scores are not attack probabilities, loss estimates, numbers of affected stores or incident counts. A 7.5 score does not establish a proportional increase in harm over 6.5. Site configuration, companion plugins and access conditions matter; no exploitation was attempted.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#dataset"},"isAccessibleForFree":true,"variableMeasured":[{"@type":"PropertyValue","name":"CVSS v3.1 base score","unitText":"CVSS v3.1 points (0–10)"}],"isBasedOn":[{"@type":"CreativeWork","name":"WPScan: CVE-2026-75861","url":"https://wpscan.com/vulnerability/a08125a6-e528-49f1-82c4-191df80af26c/"},{"@type":"CreativeWork","name":"WPScan: CVE-2026-19436","url":"https://wpscan.com/vulnerability/7c2f56f6-9c0a-4de2-9cd2-9c25a25c3530/"},{"@type":"CreativeWork","name":"WPScan: CVE-2026-19439","url":"https://wpscan.com/vulnerability/daefdabe-2277-4753-9df5-581134540000/"},{"@type":"CreativeWork","name":"[S05] CVE-2026-75861 official record and CISA CVSS assessment","url":"https://cveawg.mitre.org/api/cve/CVE-2026-75861"},{"@type":"CreativeWork","name":"[S06] CVE-2026-19436 official record and CISA CVSS assessment","url":"https://cveawg.mitre.org/api/cve/CVE-2026-19436"},{"@type":"CreativeWork","name":"[S07] CVE-2026-19439 official record and CISA CVSS assessment","url":"https://cveawg.mitre.org/api/cve/CVE-2026-19439"}]},{"@type":"NewsArticle","@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article","url":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/","headline":"Security disclosures identify value and redemption flaws in WooCommerce gift-card plugin","description":"WPScan published September advisories covering gift-card value inflation, exposed redemption details and missing ownership checks in Ultimate Gift Cards for WooCommerce.","datePublished":"2026-09-07T00:00:00.000Z","dateModified":"2026-10-19T19:57:44.573Z","inLanguage":"en","mainEntityOfPage":{"@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#webpage"},"isPartOf":{"@id":"https://giftcard.news/#website"},"isAccessibleForFree":false,"hasPart":[{"@type":"WebPageElement","isAccessibleForFree":false,"cssSelector":".reader-restricted"},{"@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#dataset"}],"image":[{"@type":"ImageObject","url":"https://giftcard.news/images/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands.webp","contentUrl":"https://giftcard.news/images/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands.webp","width":1920,"height":1440,"caption":"Illustrative card transaction; not a photograph of an affected customer, website or security incident.","@id":"https://giftcard.news/images/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands.webp#image","encodingFormat":"image/webp","description":"Customer hands holding a blue card at a retail payment terminal","creditText":"SpotOn / Unsplash","isBasedOn":"https://unsplash.com/photos/customers-interacting-with-a-cashier-and-a-point-of-sale-system-u1DVI-1UUV8"}],"articleSection":"Fraud & Security","keywords":["WPScan"],"mentions":[{"@type":"Organization","@id":"https://giftcard.news/company/wpscan/#entity","name":"WPScan","url":"https://giftcard.news/company/wpscan/"}],"wordCount":547,"citation":[{"@type":"CreativeWork","name":"[S01] Original primary announcement","url":"https://wpscan.com/vulnerability/a08125a6-e528-49f1-82c4-191df80af26c/","publisher":{"@type":"Organization","name":"WPScan"}},{"@type":"CreativeWork","name":"[S02] Official supporting context","url":"https://wpscan.com/vulnerability/7c2f56f6-9c0a-4de2-9cd2-9c25a25c3530/","publisher":{"@type":"Organization","name":"WPScan"}},{"@type":"CreativeWork","name":"[S03] Official supporting context","url":"https://wpscan.com/vulnerability/daefdabe-2277-4753-9df5-581134540000/","publisher":{"@type":"Organization","name":"WPScan"}},{"@type":"CreativeWork","name":"[S04] Official supporting context","url":"https://wordpress.org/plugins/woo-gift-cards-lite/","publisher":{"@type":"Organization","name":"WP Swings"}},{"@type":"CreativeWork","name":"[S05] CVE-2026-75861 official record and CISA CVSS assessment","url":"https://cveawg.mitre.org/api/cve/CVE-2026-75861","publisher":{"@type":"Organization","name":"CVE Program / CISA-ADP"}},{"@type":"CreativeWork","name":"[S06] CVE-2026-19436 official record and CISA CVSS assessment","url":"https://cveawg.mitre.org/api/cve/CVE-2026-19436","publisher":{"@type":"Organization","name":"CVE Program / CISA-ADP"}},{"@type":"CreativeWork","name":"[S07] CVE-2026-19439 official record and CISA CVSS assessment","url":"https://cveawg.mitre.org/api/cve/CVE-2026-19439","publisher":{"@type":"Organization","name":"CVE Program / CISA-ADP"}},{"@type":"CreativeWork","name":"[S08] CVSS v3.1 User Guide","url":"https://www.first.org/cvss/v3.1/user-guide","publisher":{"@type":"Organization","name":"FIRST"}}],"author":[{"@id":"https://giftcard.news/author/daniel-brooks/#person"}],"publisher":{"@id":"https://giftcard.news/#publisher"}},{"@type":"WebPage","@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#webpage","url":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/","name":"Security disclosures identify value and redemption flaws in WooCommerce gift-card plugin","description":"WPScan published September advisories covering gift-card value inflation, exposed redemption details and missing ownership checks in Ultimate Gift Cards for WooCommerce.","datePublished":"2026-09-07T00:00:00.000Z","dateModified":"2026-10-19T19:57:44.573Z","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/#website"},"mainEntity":{"@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#article"},"breadcrumb":{"@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#breadcrumbs"},"primaryImageOfPage":{"@id":"https://giftcard.news/images/security-disclosures-identify-value-redemption-flaws-woocommerce-gift-card-plugin-customer-hands.webp#image"}},{"@type":"BreadcrumbList","@id":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/#breadcrumbs","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://giftcard.news/"},{"@type":"ListItem","position":2,"name":"Fraud & Security","item":"https://giftcard.news/fraud-security/"},{"@type":"ListItem","position":3,"name":"Security disclosures identify value and redemption flaws in WooCommerce gift-card plugin","item":"https://giftcard.news/fraud-security/ultimate-gift-cards-woocommerce-security-disclosures/"}]}]} ```