All products

yayextra

WordPress · Plugin
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
YayExtra <= 1.5.5 - Authenticated (Administrator+) SQL InjectionCVE-2025-48299 yayextra WordPress Medium Fix reported
YayExtra <= 1.5.2 - Missing AuthorizationCVE-2025-31415 yayextra WordPress Medium Fix reported
YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file FunctionCVE-2024-7257 yayextra WordPress Critical Fix reported