WPScan

WebToffee fixes gift-card value validation flaw in WooCommerce plugin

Version 1.3.1, released September 24, addresses a flaw that WPScan says could let unauthenticated users manipulate gift-card value and order totals.

Oliver Reed · September 24, 2026 · 3 min