CVE-2024-0870 allows unauthenticated attackers to modify WooCommerce settings in WordPress sites using the YITH WooCommerce Gift Cards plugin. This vulnerability affects versions up to 4.12.0 due to missing capability checks on critical functions. Specifically, the 'save_mail_status' and 'save_email_settings' functions lack proper authorization controls. With an SVRS score of 30, while not critical, this flaw requires attention to prevent potential abuse, especially since it's tagged as "In The Wild", indicating active exploitation. Attackers could exploit this to alter email configurations or manipulate gift card settings, leading to financial loss or unauthorized access. Immediate patching to the latest version is recommended to mitigate the risk.