CVE-2026-15039

Summary: CVE-2026-15039 affects the Gift Cards for WooCommerce Pro WordPress plugin prior to 4.2.10. The vulnerability stems from a upload path that does not validate the type of uploaded files, enabling unauthenticated users to upload arbitrary files (including PHP code). This can lead to remote...