CVE-2018-16159 — CVE-2018-16159

CVE-2018-16159

CRITICAL · CVSS 9.8

EPSS exploitation probability: 0%

Published 2018-08-30T15:29:00.230 · Last modified 2026-06-17T01:43:48.000

Summary

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.

Affected products

codemenschen — gift_vouchers

Does this affect you?

Add your gear to cvedb and we'll alert you only when codemenschen ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.