Woocommerce Ultimate Gift Card

DATE	CVE	VULNERABILITY TITLE	RISK
2025-02-28	CVE-2024-8425	Unrestricted Upload of File with Dangerous Type vulnerability in Wpswings Woocommerce Ultimate Gift Card The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including, 2.6.0. network low complexity wpswings CWE-434 critical	9.8