Wordpress Alert: Gift-card balance manipulation
A gift-card extension trusts balance changes from an unauthorized request. Store credit may be created or spent improperly.
What it looks like
A gift-card extension trusts balance changes from an unauthorized request.
Why it matters
Store credit may be created or spent improperly.
What to check
Audit gift-card actions and confirm server-side authorization.
Documentation
This is an exploit pattern to check in installed components, not a claim that every WordPress site has this flaw. Confirm the product and version against its advisories before treating a site as affected. See WooCommerce REST API overview, WordPress roles and capabilities.
- Categories: WordPress
- Tags: #WordPress Security, #WooCommerce