CVE-2022-45359

Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

Score

CVSS 3.1 9.8 Critical

Status

Modified - audit@patchstack.com

Published

2022-12-06

Last modified

2026-04-28

Weaknesses

CWE-434

Affected products

• Yith Woocommerce Gift Cards (Yith)
• Yith Woocommerce Gift Cards (Yithemes)

References

• https://patchstack.com/database/vulnerability/yith-woocommerce-gift-cards-premium/wordpress-yith-woocommerce-gift-cards…