Description
WordPress Plugin YITH WooCommerce Gift Cards is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify plugin options. WordPress Plugin YITH WooCommerce Gift Cards version 1.3.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.8 or latest
References
https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/
https://plugins.svn.wordpress.org/yith-woocommerce-gift-cards/trunk/readme.txt
Related Vulnerabilities
MongoDb Uncontrolled Resource Consumption Vulnerability (CVE-2016-3104)
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9865)
MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-8004)
WordPress Plugin WP Activity Log SQL Injection (4.1.4)
Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-1240)