9.3 Critical

CVE-2025-47569 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Blind SQL Injection.This issue affects WooCommerce Ultimate Gift Card: from n/a through <= 2.9.6.

Affected products and versions

Product	Affected versions	Fixed in
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates 2.8	earliest → 2.8.10	No fix stated
WooCommerce Ultimate Gift Card 2.9	earliest → 2.9.6	No fix stated

Do you use WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates?

Track this CVE Watch WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates Check my SBOMs

www.cveye.io/en/cve/CVE-2025-47569

Timeline

Published September 9, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE