Plugin icon

YayExtra – WooCommerce Extra Product Options

yayextra

Vulnerabilities:

3

Last Updated:

May 18, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-07-16
Title
YayExtra < 1.5.6 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 1.5.6
CVSS
4.9 (medium)
Published
2025-03-31
Title
YayExtra < 1.5.3 - Missing Authorization
Fixed in
Fixed in 1.5.3
CVSS
4.3 (medium)
Published
2024-08-02
Title
YayExtra – WooCommerce Extra Product Options < 1.3.8 - Unauthenticated Arbitrary File Upload via handle_upload_file Function
Fixed in
Fixed in 1.3.8
CVSS
9.8 (critical)