← All advisories

Critical severity10.0NVD Advisory· Published May 20, 2026· Updated May 21, 2026

CVE-2026-45444

CVE-2026-45444

Description

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.

This issue affects Gift Cards For WooCommerce Pro: from n/a through 4.2.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Giftwareinferred
Range: <=4.2.6
Package: https://wordpress.org/plugins/giftware
Wpswings/Woocommerce Ultimate Gift Cardllm-fuzzy
Range: <=4.2.6

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/giftware/vulnerability/wordpress-gift-cards-for-woocommerce-pro-plugin-4-2-6-arbitrary-file-upload-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 18, 2026 to May 24, 2026)
Wordfence Blog · May 28, 2026