YayCommerce YayExtra

• CVE-2025-48299 High 7.6 WordPress YayExtra plugin <= 1.5.5 - SQL Injection Vulnerability 0.4%
• CVE-2025-31415 High 7.6 WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability 0.4%