CVE-2026-54809: WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability
Published Jun 17, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme GIFT4U allows Blind SQL Injection.
This issue affects GIFT4U: from n/a through 1.0.10.
Affected Software
1 affected component
Villatheme GIFT4U<=1.0.10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress GIFT4U pluginto a version that resolves this vulnerability.Fixed in 1.1.0
Event History
Jun 17, 2026
CVE Published
via MITRE·01:51 PM
Data Sourced
via MITRE·01:51 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-54809?
CVE-2026-54809 has a critical severity rating of 9.3.
2
How do I fix CVE-2026-54809?
To fix CVE-2026-54809, update the VillaTheme GIFT4U plugin to version 1.0.11 or later.
3
What kind of vulnerability is CVE-2026-54809?
CVE-2026-54809 is an SQL Injection vulnerability that allows for Blind SQL Injection.
4
Which versions of the GIFT4U plugin are affected by CVE-2026-54809?
CVE-2026-54809 affects GIFT4U versions from n/a through 1.0.10.
5
Can CVE-2026-54809 affect my WordPress site?
Yes, CVE-2026-54809 can compromise your WordPress site if the affected GIFT4U plugin is used.