4.3 Medium

CVE-2025-30923 Cross-Site Request Forgery (CSRF) vulnerability in powerfulwp Gift Message for WooCommerce…

Description

Cross-Site Request Forgery (CSRF) vulnerability in powerfulwp Gift Message for WooCommerce gift-message-for-woocommerce allows Cross Site Request Forgery.This issue affects Gift Message for WooCommerce: from n/a through <= 1.7.8.

Affected products and versions

Product	Affected versions	Fixed in
Gift Message for WooCommerce 1.7	earliest → 1.7.8	No fix stated

The 2 CVEs of Gift Message for WooCommerce →

CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium

Do you use Gift Message for WooCommerce?

Track this CVE Watch Gift Message for WooCommerce Check my SBOMs

www.cveye.io/en/cve/CVE-2025-30923

Timeline

Published March 27, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-30923 Cross-Site Request Forgery (CSRF) vulnerability in powerfulwp Gift Message for WooCommerce…

Description

Affected products and versions

Other CVEs of Gift Message for WooCommerce