What’s Vulnerable › Products

YayCommerce YayExtra vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your YayCommerce YayExtra version is affected

Latest YayCommerce YayExtra vulnerabilities

• CVE-2025-48299 — WordPress YayExtra plugin <= 1.5.5 - SQL Injection Vulnerability (CVSS 7.6)
• CVE-2025-31415 — WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability (CVSS 7.6)
• CVE-2024-7257 — YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function (CVSS 9.8)