CVE-2025-47569

—

CVSS 3.1

9.3 critical

EPSS

<1%p48

Published

Sep 9, 2025 (Sep 9, 2025)

Modified

Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Blind SQL Injection.This issue affects WooCommerce Ultimate Gift Card: from n/a through <= 2.9.6.

Ecosystems: WordPress, E-commerce
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news1 stories

FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams

The Hacker NewsNov 26, 08:08 UTC · Nov 26, 2025Phishing & fraud CVE-2025-54236 CVE-2025-61882 CVE-2025-47569