WooCommerce sellers generally use the YITH WooCommerce Gift Cards Premium to promote gift card sales through their websites. A recent critical flaw has allowed hackers to upload files, including web shells, to sites installed with the plugin, giving them complete control over the website. The plugin has over 50,000 installs worldwide, making the unauthorized attack prevalent. Experts have termed the flaw CVE-2022-45359 (CVSS v3: 9.8), affecting the plugin versions until 3.19.0. Versions 3.20.0 and 3.21.0 have security updates, and experts advise WooCommerce merchants to update these safer versions. WordPress security experts at Wordfence explain that the hackers are targeting sites running on older, outdated versions through upload backdoors on the sites, and remote code execution, to take over the platforms.
Critical Flaw Identified in YITH WooCommerce Gift Cards Premium Plugin
Recent Blogs
- WooCommerce vs BigCommerce for Growing Stores: Which Is Better in 2026?
- Holiday Returns Without the Headache: A Simple Returns Policy Guide for Online Stores
- What Does a Magento 2 Migration Checklist and Cost Look Like?
- How Much Does a WooCommerce Website Cost in 2026? A Complete Pricing Guide
- High-Risk Payment Processing for Firearms and Ammo Stores
Most Popular Blogs
- Top 10 online shopping sites in the world, plus 11 eCommerce websites worth knowing
- WooCommerce Vs. Magento Vs. BigCommerce Vs. Shopify: A Comprehensive Comparison Guide (Updated 2026)
- What You Need to Know About Cross-border eCommerce in 2025
- Top eCommerce Platforms for Emerging Startups and Businesses in 2024
- Why High-Growth B2B Brands Are Choosing Shopify Plus in 2026
Is Your eCommerce Store Ready for the Google Core Web Vitals Update?
Unoptimized websites will lose 70% traffic. Don't let this update KILL your eCommerce business!
Talk to ExpertsAny questions?
Related Platforms
Our Locations
Recent Case Studies
-
January 14, 2026Salesforce Experience Cloud for Employee & Family Care Services
Summary Virtina built a secure Salesforce Experience Cloud portal for a US non-profit that delivers employee benefits services, including elder care, ...
Read More -
January 14, 2026
Digital Transformation for Water Efficiency Programs
Summary A leading utility services provider partnered with Virtina to modernize its water efficiency programs and leak remediation operations. The sol ...
Read More -
November 20, 2025B2B eCommerce Setup for The Fruitful Grind
Summary The Fruitful Grind wanted to strengthen its wholesale business by creating a dedicated buying experience for retailers and multi-location cust ...
Read More -
November 17, 2025
Multi-Storefront Migration for a Communications Accessories Brand
Summary Klein Electronics, a communications accessories company, had recently acquired another ecommerce brand. They wanted to keep both brands operat ...
Read More
