This vulnerability (CWE-434) in WP Swings Gift Cards For WooCommerce Pro permits unrestricted upload of files with dangerous types, allowing attackers to upload malicious files. The issue affects all versions up to 4.2.6. The CVSS 3.1 base score is 10.0 (critical), reflecting that an attacker can exploit this remotely without authentication or user interaction, causing complete compromise of confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows remote attackers to upload malicious files, potentially leading to full system compromise including data theft, data manipulation, and denial of service. The vulnerability has a critical CVSS score of 10.0, indicating maximum impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload permissions, disable or limit the use of the vulnerable plugin, and monitor for suspicious activity related to file uploads. Avoid exposing the affected plugin to untrusted users.