Wpswings

Woocommerce Ultimate Gift Card

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2025-47569

  • EPSS 0.04%
  • Published 09.09.2025 16:25:28
  • Last modified 11.09.2025 17:14:36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates. This issue affects WooCommerce Ultimat...

9.8

CVE-2024-8425

  • EPSS 59.91%
  • Published 28.02.2025 09:15:11
  • Last modified 06.03.2025 16:36:34

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and i...