Lucene search

CVE-2024-7257

🗓️ 03 Aug 2024 10:50:15Reported by [email protected]Type

The YayExtra – WooCommerce Extra Product Options plugin for WordPress has arbitrary file upload vulnerabilit

Reporter	Title	Published	Views	Family All 6
Patchstack	WordPress YayExtra Plugin <= 1.3.7 is vulnerable to Arbitrary File Upload	5 Aug 202400:00	–	patchstack
CVE	CVE-2024-7257	3 Aug 202410:15	–	cve
Vulnrichment	CVE-2024-7257 YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function	3 Aug 202409:37	–	vulnrichment
Cvelist	CVE-2024-7257 YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function	3 Aug 202409:37	–	cvelist
RedhatCVE	CVE-2024-7257	5 Feb 202511:54	–	redhatcve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 29, 2024 to August 4, 2024)	8 Aug 202415:35	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/753a4f7a-7bd4-43a4-b8fb-9e982239ba0e
plugins	www.plugins.trac.wordpress.org/browser/yayextra/tags/1.3.6/includes/Classes/ProductPage.php
plugins	www.plugins.trac.wordpress.org/browser/yayextra/tags/1.3.6/includes/Classes/ProductPage.php
wordpress	www.wordpress.org/plugins/yayextra/
plugins	www.plugins.trac.wordpress.org/changeset/3129731/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Aug 2024 10:15Current

CVSS39.8

EPSS0.00063

CWE-434