EUVD-2024-48204

Malicious code in bioql PyPI...

CVE-2025-48299 WordPress YayExtra plugin <= 1.5.5 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayExtra yayextra allows SQL Injection.This issue affects YayExtra: from n/a through = 1.5.5...

CVE-2025-48299 WordPress YayExtra plugin <= 1.5.5 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayExtra yayextra allows SQL Injection.This issue affects YayExtra: from n/a through = 1.5.5...

WordPress plugin YayExtra SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin YayExtra versions = 1.5.2...

CVE-2024-7257

The YayExtra – WooCommerce Extra Product Options plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handleuploadfile function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary...

WordPress YayExtra plugin <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function vulnerability

Unauthenticated Arbitrary File Upload via handleuploadfile Function vulnerability discovered by wesley wcraft in WordPress Plugin YayExtra versions = 1.3.7...

WordPress YayExtra Plugin <= 1.3.7 is vulnerable to Arbitrary File Upload

Software YayExtra Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7257 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 6980efb16c4d Credits wesley wcraft Required privilege Unauthenticated...