Critical · 10.0 CVE-2026-45444 EUVD-2026-31149GHSA-w7h5-vx9m-v9jx

WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability

Published May 20, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.

This issue affects Gift Cards For WooCommerce Pro: from n/a through 4.2.6.

Vendor	Product	Affected	Fixed
WP Swings	Gift Cards For WooCommerce Pro	≤ 4.2.6	—