cbcvebase.
CVE-2025-47569
published 2025-09-09

CVE-2025-47569: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card…

PriorityP262critical9.3CVSS 3.1
AVNACLPRNUINSCCHINAL
EPSS
0.58%
43.3th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Blind SQL Injection.This issue affects WooCommerce Ultimate Gift Card: from n/a through <= 2.9.6.

Affected

1 ranges
VendorProductVersion rangeFixed in
wpswingswoocommerce_ultimate_gift_card<= 2.9.6—

Detection & IOCsextracted from sources · hover to see the quote

  • →CVE-2025-47569 is a Blind SQL Injection vulnerability in the WooCommerce Ultimate Gift Card plugin (versions up to and including 2.9.6); monitor for anomalous SQL injection patterns in requests targeting this plugin's endpoints. ↗
  • →Threat actors are actively selling access to database data exfiltrated via CVE-2025-47569 exploitation on darknet markets; monitor for large or unusual outbound data transfers from WooCommerce database servers. ↗
  • →Credential validation tools are specifically tailored for WooCommerce and WordPress; monitor for high-volume authentication attempts or credential stuffing against WooCommerce/WordPress login endpoints. ↗
  • →Underground markets are selling leaked WooCommerce records containing shopper and merchant details; monitor for exposure of WooCommerce database contents in threat intelligence feeds. ↗
  • ·The vulnerability affects WooCommerce Ultimate Gift Card plugin from an unspecified starting version through 2.9.6 inclusive; the lower bound of affected versions is not defined. ↗
  • ·The Fortinet report does not provide specific exploit code, payload signatures, or network indicators for CVE-2025-47569; detection must rely on behavioral and anomaly-based approaches until more specific IOCs are published. ↗
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.