CVE-2026-45444
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
The Gift Cards For WooCommerce Pro plugin for WordPress (versions up to and including 4.2.6) contains an unrestricted upload of files with dangerous types vulnerability. This allows an attacker to upload malicious files to the server.
Risk Assessment
The organization risks an attacker uploading a malicious file (e.g., a PHP script) and achieving remote code execution on the server, potentially leading to full compromise of the WordPress site.
Recommendation
Update the Gift Cards For WooCommerce Pro plugin to version 4.2.7 or later. Restrict file uploads to trusted users only.
Original NVD description (English source)
Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files. This issue affects Gift Cards For WooCommerce Pro: from n/a through 4.2.6.