The YITH WooCommerce Gift Cards plugin for WordPress has a security issue where anyone can change important information without permission. This can happen because the plugin doesn’t check for the right permissions when using the ‘save_mail_status’ and ‘save_email_settings’ functions. This means that someone who isn’t logged in could make changes to WooCommerce settings without being stopped.