Skip to content
OpenAdvisories

Vendor

YayCommerce

28 known vulnerabilities.

Products

YayMail – WooCommerce Email Customizer 4 YayMail 3 YaySMTP 3 YayCurrency 2 SMTP for Amazon SES – YaySMTP 2 YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports 2 YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service 2 YayExtra 2 SMTP for SendGrid – YaySMTP 2 YayPricing 2 Brand 1 SMTP for Amazon SES 1 SMTP for Sendinblue – YaySMTP 1 YayExtra – WooCommerce Extra Product Options 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-7257

    YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function

    The YayExtra – WooCommerce Extra Product Options plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_upload_file function in all versions up to, and including, 1.3.7. This makes it possible for unauth…

    YayCommerce YayExtra – WooCommerce Extra Product Options Web / CMS