YayCommerce YayCurrency Plugin Code Injection Vulnerability Allowing Remote Code Execution
Vulnerability
A code injection vulnerability has been identified in the YayCommerce YayCurrency WordPress plugin, affecting versions through 3.2. This vulnerability allows for remote code execution on the affected website.
Impact
Exploitation of this vulnerability allows for remote code execution on the target website, potentially leading to unauthorized access and control over the site.
Added: Sep 26, 2025, 9:59 AM
Updated: Sep 26, 2025, 3:26 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
4.8remediation
0.0relevance
0.6threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.