cbcvebase.

Wp Swings Woocommerce Ultimate Gift Card vulnerabilities

1 known vulnerability affecting wp_swings/woocommerce_ultimate_gift_card.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-8425P1CRITICALCVSS 9.8ExploitedPoC≤ 2.9.22025-02-28
CVE-2024-8425 [CRITICAL] CWE-434 CVE-2024-8425: The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the
nvd
Wp Swings Woocommerce Ultimate Gift Card vulnerabilities | cvebase