Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

Yahman Add‑ons plugin lets strangers upload malicious files

CVE-2026-75799 · published 19 days ago
Summary

The Yahman Add‑ons plugin for WordPress can store files from the internet without checking their type. Because these files are saved in a folder that anyone can reach, an unauthenticated attacker could place a malicious script on the server and run it. Update the plugin to the latest version or remove the vulnerable feature to stop this possibility.

What to do
  • Update unknown yahman add-ons to version 0.9.31 or later.
Affected software
VendorProductAffected versions
unknown yahman add-ons < 0.9.31
Original advisory text
YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache
The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published23 Sep 2026
Updated7 Oct 2026
First seen23 Sep 2026
Sources
CVE-2026-75799 · NVD
CVE-2026-75799 · MITRE
Track software like this
Free during beta