WordPress Plugin Vulnerabilities

YITH WooCommerce Gift Cards < 3.20.0 - Unauthenticated Arbitrary File Upload

Description

The plugin does not validate files to be uploaded, allowing unauthenticated attackers to upload arbitrary files, such as PHP

Affects Plugins

Plugin icon
yith-woocommerce-gift-cards-premium
Fixed in 3.20.0

References

CVE
CVE-2022-45359

Miscellaneous

Original Researcher
Dave Jong
Verified
No
WPVDB ID
e8f8bdc0-ac53-4b14-b34c-4930076711ce

Timeline

Publicly Published
2022-12-06 (about 3 years ago)
Added
2022-12-06 (about 3 years ago)
Last Updated
2022-12-06 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
File Uploader - PHP File Upload
Published
2021-09-13
Title
Download from files <= 1.48 - Unauthenticated Arbitrary File Upload
Published
2014-08-01
Title
wp-homepage-slideshow - Arbitrary File Upload
Published
2025-09-22
Title
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) < 4.9.56 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
Published
2024-05-06
Title
Startklar Elementor Addons < 1.7.14 - Unauthenticated Arbitrary File Upload