WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates <= 2.9.6 - Unauthenticated SQL Injection
high
The WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. T...
- CVSS:
- 7.5
- Affected:
- up to 2.9.6
- Fixed in:
- 2.9.7
- Disclosed:
- Jun 3, 2025
CVE-2025-47569 on NVD →
WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload
critical
The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated attackers...
- CVSS:
- 9.8
- Affected:
- up to 2.9.2
- Fixed in:
- 2.9.3
- Disclosed:
- Feb 27, 2025
CVE-2024-8425 on NVD →
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates < 2.9.1 - Reflected Cross-Site Scripting
medium
The WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
- CVSS:
- 6.1
- Affected:
- up to 2.9.1
- Fixed in:
- 2.9.1
- Disclosed:
- Nov 28, 2024
CVE-2024-53740 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database