Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-47569 EUVD-2025-27441GHSA-rf82-rp7g-rm8p

WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability

Published Sep 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Blind SQL Injection.This issue affects WooCommerce Ultimate Gift Card: from n/a through <= 2.9.6.

Affected products

VendorProductAffectedFixed
WPSwings WooCommerce Ultimate Gift Card ≤ 2.9.6 —

References