CVE-2025-31415: WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability
Published Apr 1, 2025
·Updated
Missing Authorization vulnerability in YayCommerce YayExtra yayextra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayExtra: from n/a through <= 1.5.2.
Affected Software
1 affected component
Yaycommerce YayExtra<=1.5.2
Remediation
Information
Update the WordPress YayExtra plugin to the latest available version (at least 1.5.3).
Event History
Apr 1, 2025
CVE Published
via MITRE·05:31 AM
Data Sourced
via MITRE·05:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-31415?
CVE-2025-31415 is classified as a high severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2025-31415?
To fix CVE-2025-31415, update YayExtra to version 1.5.3 or later, which addresses the missing authorization issue.
3
What type of vulnerability is CVE-2025-31415?
CVE-2025-31415 is a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels.
4
Which versions of YayExtra are affected by CVE-2025-31415?
CVE-2025-31415 affects YayExtra versions up to and including 1.5.2.
5
Who is impacted by CVE-2025-31415?
Users of YayCommerce YayExtra and WordPress YayExtra versions up to 1.5.2 are impacted by CVE-2025-31415.