{"affected":[{"defaultStatus":"unknown","product":"YITH WooCommerce Gift Cards","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"4.39.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-88813","cwes":["CWE-284"],"description":"The YITH WooCommerce Gift Cards WordPress plugin through 4.39.0 does not reconcile the value of a gift card it issues against the amount actually paid for it, instead crediting the new card with the item's pre-discount price, which allows customers to apply an ordinary store coupon at checkout and receive a gift card worth more than they paid.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/fc7e0837-640d-461d-aac3-cd58c8137c14/"}],"kev":null,"metrics":[],"modifiedAt":1794376815978,"publishedAt":1794376815978,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/fc7e0837-640d-461d-aac3-cd58c8137c14/"}],"remediation":[],"revision":"02ca9aa90f18b74d8dc5b13422c81ab6440192ff82c618c33b67846d693d9e70","sources":[{"modifiedAt":1794376815978,"name":"CNA: WPScan","retrievedAt":1794377481178,"url":"https://www.cve.org/CVERecord?id=CVE-2026-88813"}],"ssvc":null,"status":"published","title":"YITH WooCommerce Gift Cards <= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted Purchase","updatedAt":1794377481178}