WordPress security by component
Gift Cards For WooCommerce Pro
Plugin description
Gift Cards For WooCommerce Pro adds gift card creation, purchasing, redemption, and management features to WooCommerce stores.
Gift Cards For WooCommerce Pro (giftware) is a WordPress plugin with 2 published CVE records in this archive. The latest tracked vulnerability was published Aug 12, 2026; the highest published CVSS base score is 10.
Plugin slug:
giftwareLatest vulnerability
CVE-2026-15039: Giftware public upload accepts executable PHP
Giftware before 4.2.10 does not validate file types in one upload path. An unauthenticated attacker can upload arbitrary files, including PHP code, resulting in remote code execution when the uploaded file is executable.
| Safe version |
|
||
|---|---|---|---|
| Aug 12, 2026 |
CVE-2026-15039
Giftware public upload accepts executable PHP
Giftware before 4.2.10 does not validate file types in one upload path. An unauthenticated attacker can upload arbitrary files, including PHP code, resulting in remote code execution when the uploaded file is executable.
|
4.2.10 |
CVE9.8
|
| May 20, 2026 |
CVE-2026-45444
Gift Cards For WooCommerce Pro: Dangerous file upload
Gift Cards For WooCommerce Pro is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The published affected range is n/a through 4.2.6.
|
4.2.7 |
CVE10.0
|