Woocommerce Ultimate Gift Card

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-8425 Feb 28, 09:15 CRITICAL POC THREAT Emergency

The WooCommerce Ultimate Gift Card plugin through version 2.6.0 contains unauthenticated arbitrary file uploads in the mail preview and cart functions. Insufficient file type validation allows attackers to upload PHP webshells through the gift card functionality, achieving remote code execution on e-commerce sites.

WordPress RCE File Upload Woocommerce Ultimate Gift Card Wpswings

NVD

CVSS 3.1

9.8

EPSS

63.0%

Threat

5.4

CVE-2024-8425

EPSS 63% 5.4 CVSS 9.8

CRITICAL POC THREAT Emergency

The WooCommerce Ultimate Gift Card plugin through version 2.6.0 contains unauthenticated arbitrary file uploads in the mail preview and cart functions. Insufficient file type validation allows attackers to upload PHP webshells through the gift card functionality, achieving remote code execution on e-commerce sites.

WordPress RCE File Upload +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy