CVE-2025-48299

CVE-2025-48299 describes an SQL Injection in the WordPress YayExtra plugin (YayCommerce YayExtra) affecting versions up to 1.5.5. Exploitation details indicate network access with low attack complexity and no user interaction, but the impact is High confidentiality risk and Low availability impac...

CVE-2025-31415 WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in YayCommerce YayExtra yayextra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayExtra: from n/a through = 1.5.2...