CVE-2022-45359

—

CVSS 3.1

9.8 critical

EPSS

14%p96

Published

Dec 6, 2022 (Dec 6, 2022)

Modified

Jun 17, 2026

Description

Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

Vendors: yithemes
Products: yith woocommerce gift cards
Ecosystems: WordPress, E-commerce
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (13.5%)

In the news1 stories

Experts warn of attacks exploiting WordPress gift card plugin

Security AffairsDec 25, 19:42 UTC · Dec 25, 2022Vulnerability CVE-2022-45359

60