← All advisories

Critical severity9.8NVD Advisory· Published Dec 6, 2022· Updated Jun 17, 2026

CVE-2022-45359

CVE-2022-45359

Description

Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

Affected products

3

Yithemes/Yith Woocommerce Gift Cards2 versions
cpe:2.3:a:yithemes:yith_woocommerce_gift_cards:*:*:*:*:premium:wordpress:*:*+ 1 more
- cpe:2.3:a:yithemes:yith_woocommerce_gift_cards:*:*:*:*:premium:wordpress:*:*range: <=3.19.0
- (no CPE)range: n/a
WordPress/YITH WooCommerce Gift Cards premiumllm-create
Range: <=3.19.0

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/yith-woocommerce-gift-cards-premium/wordpress-yith-woocommerce-gift-cards-premium-plugin-3-19-0-unauth-arbitrary-file-upload-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.