SQL Injection Vulnerability in WooCommerce Ultimate Gift Card by WPSwings
CVE-2025-47569

9.3CRITICAL

Key Information:

Vendor

WordPress
Status
WooCommerce Ultimate Gift Card - Create, Sell And Manage Gift Cards With Customized Email Templates
Vendor
CVE Published:
9 September 2025

What is CVE-2025-47569?

WPSwings WooCommerce Ultimate Gift Card plugin contains an SQL Injection vulnerability that arises from improper handling of special elements within SQL commands. This weakness could allow attackers to manipulate SQL queries, potentially leading to unauthorized access to the database. Affected versions include those up to 2.8.10, making it crucial for users of this plugin to apply necessary patches to protect their websites. Prompt remediation is essential to mitigate risks associated with this vulnerability.

Affected Version(s)

WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates <= 2.8.10

References

https://patchstack.com/database/wordpress/plugin/woocomme...
vdb-entry

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bonds (Patchstack Alliance)
.
CVE-2025-47569 : SQL Injection Vulnerability in WooCommerce Ultimate Gift Card by WPSwings