CVE-2026-45444

—

CVSS 3.1

10.0 critical

EPSS

<1%p21

Published

May 20, 2026 (May 20, 2026)

Modified

Jul 23, 2026

Description

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files. This issue affects Gift Cards For WooCommerce Pro: from n/a through 4.2.6.

Ecosystems: WordPress, E-commerce
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.