CVE-2026-45444: WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.
This issue affects Gift Cards For WooCommerce Pro: from n/a through 4.2.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Gift Cards For WooCommerce Proto a version that resolves this vulnerability.Fixed in 4.2.7
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45444?
CVE-2026-45444 has a high severity rating due to its potential for arbitrary file uploads, allowing attackers to execute malicious files.
How do I fix CVE-2026-45444?
To fix CVE-2026-45444, update the Gift Cards For WooCommerce Pro plugin to version 4.2.7 or later.
What type of vulnerability is CVE-2026-45444?
CVE-2026-45444 is classified as an Unrestricted File Upload vulnerability.
What are the impacts of CVE-2026-45444?
The impact of CVE-2026-45444 includes potential unauthorized access to the server and execution of malicious code.
How does CVE-2026-45444 exploit the system?
CVE-2026-45444 exploits the system by allowing an attacker to upload files of dangerous types, which may lead to arbitrary code execution.