nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-45359 CVE-2022-45359
CRITICAL
WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload
Record summary
CVE-2022-45359 has a selected CVSS score of 9.8 (critical).
Description
Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Dec 22, 2022 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 20, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
YITH WooCommerce Gift CardsBrowse YITH / YITH WooCommerce Gift CardsDefault status: unaffected | CVE List | Through 3.19.0 | affected |
yith_woocommerce_gift_cardsBrowse yithemes / yith_woocommerce_gift_cards | VulnCheck | Version data not supplied | |
References
2patchstack.comvdb entry
https://patchstack.com/database/vulnerability/yith-woocommerce-gift-cards-premium/wordpress-yith-woocommerce-gift-cards-premium-plugin-3-19-0-unauth-arbitrary-file-upload-vulnerability?_s_id=cve