Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•5 views

CVE-2025-47569: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Blind SQL Injection.This issue affects WooCommerce Ultimate Gift Card: from n/a through = 2.9.6...

9.3CVSS5.8AI score0.00621EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/04/19 2:23 a.m.•455 views

Exploit for Unrestricted Upload of File with Dangerous Type in Wpswings Woocommerce_Ultimate_Gift_Card

Wordpress WooCommerce Ultimate Gift Card = 2.6.0 - Unauthenti...

9.8CVSS9.9AI score0.04082EPSS
SaveExploits12
Vulnrichment
Vulnrichment
•added 2025/02/28 8:23 a.m.•16 views

CVE-2024-8425 WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and 'mwbwgmwoocommerceaddcartitemdata' functions in all versions up to, and including, 2.9.2. This makes it possible for...

9.8CVSS8AI score0.04082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/28 12:00 a.m.•1 views

CVE-2024-8425: Unrestricted Upload of File with Dangerous Type

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and 'mwbwgmwoocommerceaddcartitemdata' functions in all versions up to, and including, 2.9.2. This makes it possible for...

9.8CVSS6.5AI score0.04082EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/02 2:15 p.m.•33 views

CVE-2024-53740

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a through 2.9.1...

7.1CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:42 p.m.•66 views

CVE-2024-53740

CVE-2024-53740 is a reflected XSS in the WordPress plugin “WooCommerce Ultimate Gift Card” (notFound variant) prior to version 2.9.1. The issue arises from improper input neutralization during web page generation, allowing attacker-controlled input to be reflected in a page. Affected product: Woo...

7.1CVSS7.2AI score0.00255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•1 views

CVE-2024-53740: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a through 2.9.1...

7.1CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Rows per page
Query Builder