CVE-2024-7257

Summary

CVE-2024-7257: A vulnerability has been identified in the YayExtra – WooCommerce Extra Product Options plugin for WordPress. Unauthenticated attackers can exploit this issue by uploading arbitrary files due to insufficient file type validation in the handle_upload_file function, affecting versions up to 1.3.7. Successful attacks may enable remote code execution, posing a significant risk to affected sites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.