Description
WordPress Plugin YITH WooCommerce Gift Cards is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify plugin options. WordPress Plugin YITH WooCommerce Gift Cards version 1.3.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.8 or latest
References
https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/
https://plugins.svn.wordpress.org/yith-woocommerce-gift-cards/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)
WordPress Plugin Redux Framework Cross-Site Scripting (4.4.17)
Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20400)
Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-6357)