Critical · 9.8 CVE-2022-45359 EUVD-2022-48256GHSA-9263-c88f-rf54

WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload

Published Dec 6, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Yith Product: YITH WooCommerce Gift Cards Category: Web / CMS

Description

Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

Affected products

Vendor	Product	Affected	Fixed
YITH	YITH WooCommerce Gift Cards	≤ 3.19.0	—

References

https://patchstack.com/database/vulnerability/yith-woocommerce-gift-cards-premium/wordpress-yith-woocommerce-gift-cards-premium-plugin-3-19-0-unauth-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry