YAHMAN Add-ons vulnerabilities
We track 1 vulnerability in YAHMAN Add-ons products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest YAHMAN Add-ons vulnerabilities
- 9.0 Critical severity
YAHMAN Add-ons: Improper Control of Generation of Code
The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant featu