CVE-2026-45444criticalobserved exploitationCWE-434

CVE-2026-45444: critical vulnerability in WP Swings Gift Cards For WooCommerce Pro

WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability

Published · Updated

Follow this CVE+ Monitor Gift Cards for WooCommerce Pro

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 10epss 0.3%
from disclosure to weapon
Published on NVDMay 20
VulnCheckMay 20
Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files. This issue affects Gift Cards For WooCommerce Pro: from n/a through 4.2.6.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
WP Swings · Gift Cards For WooCommerce Pro