cbcvebase.

Yaycommerce Yayextra Woocommerce Extra Product Options vulnerabilities

1 known vulnerability affecting yaycommerce/yayextra_woocommerce_extra_product_options.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-7257P2CRITICALCVSS 9.8≤ 1.3.72024-08-03
CVE-2024-7257 [CRITICAL] CWE-434 CVE-2024-7257: The YayExtra – WooCommerce Extra Product Options plugin for WordPress is vulnerable to arbitrary fil The YayExtra – WooCommerce Extra Product Options plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_upload_file function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make r
nvd
Yaycommerce Yayextra Woocommerce Extra Product Options vulnerabilities | cvebase