YITH WooCommerce Gift Cards Premium

YITH WooCommerce Gift Cards Premium has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 8.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

Every one of the 3 issues recorded for YITH WooCommerce Gift Cards Premium has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Dave Jong.

Strategic Overview

Avg CVSSHigh

8.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all YITH WooCommerce Gift Cards Premium vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2022-45359

Yith WooCommerce Gift Cards Premium <= 3.19.0 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records


2023-05-10 00:00	YITH WooCommerce Gift Cards Premium <= 3.23.1 - Missing Authorization YITH WooCommerce Gift Cards Premium <= 3.23.1	`CVE-2022-44633`	6.5 Medium	Dave Jong	Yes
2022-11-22 00:00	Yith WooCommerce Gift Cards Premium <= 3.19.0 - Unauthenticated Arbitrary File Upload YITH WooCommerce Gift Cards Premium <= 3.19.0	`CVE-2022-45359`	9.8 Critical	Dave Jong	Yes
2021-01-27 00:00	YITH WooCommerce Gift Cards Premium <= 3.3.0 - Arbitrary File Upload YITH WooCommerce Gift Cards Premium < 3.3.1	`CVE-2021-3120`	9.8 Critical	Anonymous	Yes

Showing 1–3 of 3 reports