Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Yahman Add-ons
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-75799 | 1 Wordpress-extensions | 1 Yahman Add-ons | 2026-09-27 | 9 Critical |
| The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled. | ||||
Page 1 of 1.