CVE-2026-57396

The Flintop Free Gifts for WooCommerce plugin is vulnerable to stored cross-site scripting (XSS) due to improper input neutralization during web page generation, affecting versions up to 13.1.0. This vulnerability can allow attackers to inject malicious scripts that execute in the context of users' browsers, potentially compromising user data and site integrity. E-commerce site administrators using this plugin should prioritize patching to mitigate the risk of exploitation.