PT-2026-42226 · Woocommerce · Gift Cards For Woocommerce

Patchstack · Published 2026-05-20 · Updated 2026-05-21 · CVE-2026-45444

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gift Cards For WooCommerce Pro versions prior to 4.2.7

Description An unrestricted file upload issue allows the use of malicious files with dangerous types. This flaw has been confirmed to be exploited in the wild.

Recommendations Update to a version newer than 4.2.6.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-45444

Affected Products

Gift Cards For Woocommerce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-45444 · Security Note
• https://twitter.com/autumn_good_35/status/2057489288909213751 · Twitter Post
• https://twitter.com/TuringCyberObs/status/2057475710634139690 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/giftware/vulnerability/wordpress-gift-cards-for-woocommerce-pro-plugin-4-2-6-arbitrary-file-upload-vulnerability?_s_id=cve · Note