CVE-2025-47569

CVSS 3.1: 9.3 critical
EPSS: <1%p48
Published: Sep 9, 2025 · Sep 9, 2025
Modified: Sep 30, 2026

Analyze CVE-2025-47569 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Blind SQL Injection.This issue affects WooCommerce Ultimate Gift Card: from n/a through <= 2.9.6.

Ecosystems: WordPress, E-commerce

Weakness: CWE-89

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

1 story

FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams

The Hacker NewsNov 26, 08:08 UTC · Nov 26, 2025Phishing & fraudCVE-2025-54236 CVE-2025-61882 CVE-2025-475691 · 1 read