PLUGIN SECURITY

Is Yith Woocommerce Gift Cards safe?

The essential tool for selling gift cards in your store, increasing your conversion rate and attracting new customers.

What this plugin does

  • Slug: yith-woocommerce-gift-cards
  • Author: YITHEMES
  • 10000+ active installs
  • 66/100 rating (52 reviews on wordpress.org)
  • 656124 all-time downloads
  • On WordPress.org since 2015-09-22

coupondiscountgiftgift cardgift cards

Maintenance status

  • Latest known version: 4.36.0
  • Last updated: 2026-07-21 1:08pm GMT
  • Tested up to WordPress: 7.0.4
  • Requires PHP: 8.0+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

3 known CVEs on file for Yith Woocommerce Gift Cards. Reported between 2019 and 2024.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-0870 YITH WooCommerce Gift Cards [yith-woocommerce-gift-cards] < 4.13.0 Improper Authorization Medium 5.3 < 4.13.0 4.13.0 2024-05-13 ✓ fixed in latest
YITH WooCommerce Gift Cards [yith-woocommerce-gift-cards] < 2.15.0 Unknown < 2.15.0 2.15.0 2022-11-11 ✓ fixed in latest
CVE-2022-44630 YITH WooCommerce Gift Cards [yith-woocommerce-gift-cards] < 2.15.0 Cross-Site Request Forgery (CSRF) Medium 4.6 < 2.15.0 2.15.0 2022-11-11 ✓ fixed in latest
CVE-2019-16251 YITH WooCommerce Gift Cards [yith-woocommerce-gift-cards] < 1.3.8 Medium 4.3 < 1.3.8 1.3.8 2019-10-31 ✓ fixed in latest
YITH WooCommerce Gift Cards [yith-woocommerce-gift-cards] < 2.15.0 Unknown < 2.15.0 2.15.0 ✓ fixed in latest

How to fix it

Keep Yith Woocommerce Gift Cards updated — 4.36.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.