YayExtra – WooCommerce Extra Product Options

YayExtra – WooCommerce Extra Product Options has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 1 of the records (33%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for YayExtra – WooCommerce Extra Product Options has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. YayExtra – WooCommerce Extra Product Options is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all YayExtra – WooCommerce Extra Product Options vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-7257

YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function

Read the full analysis

Vulnerability Records

3 records
YayExtra – WooCommerce Extra Product Options banner
Latestv2.1.0

YayExtra – WooCommerce Extra Product Options

YayCommerce

Author

YayCommerce

4.8(23)
96/100
Last Updated
2026-09-09 (3d ago)
Active Installs
1,000+
Downloads
40,391
Requires WP
6.2+
Requires PHP
7.2+
Tested up to
WP 7.1
Created
2022-08-26 (4y ago)

YayExtra – Product Options for WooCommerce lets you add customizable options and extra fields to your products. Perfect for stores that sell personalized, configurable, or add-on products. What you can do with YayExtra: Add custom product options to any WooCommerce product Offer personalization fields (name, message, notes, etc.) Create product add-ons from existing products Collect extra information from customers before checkout Improve product pages and increase order value 👉 Check it out: YayExtra – Woo Product Options Pro Works great for selling: Custom apparel Personalized gifts Configurable products Service add-ons Print-on-demand items Value-added services Build better product pages. Offer more choices. Sell more with YayExtra. 📌 Documentation | Quick Demo | Admin Test Drive ⚡️ FEATURES Powerful Custom Product Options YayExtra supports many WooCommerce product field types to serve your diverse use cases: Allow customers to input text, number, email, etc. Add radio buttons to the original product Enable checkbox to allow for privacy policy acknowledgement Add button rows to customize the base product Add one time fee in percentage or fixed amount Add multiple fees to multiple product options Display the subtotal for the selected extras Multiple Options in an Option Set You can add many product custom fields in the same group. Related options can be displayed next to each other or vertically. A product field can trigger the display of the next product field. Apply Product Options in Bulk A group of product fields can be applied to all products, a group of products in a specific category, a group of products with a specific tag, or hand-picked products. Developer-Friendly This product options plugin allows using hooks for before_calculate_totals function to modify the cart item line total. WooCommerce Conditional Variations YayExtra allows you to create conditional logic that can be combined with the existing custom options. Conditional logic shows the next product fields if the user selects a specific option value. Let’s suppose that you sell car parts, so when the customer chooses to have “Accessories” then related options like “Front door items” or “Replacement kit” can be shown on the current product page. Otherwise, if the customer doesn’t check the “Accessories” checkbox, then those options will not show up, which will keep your product page neat and clear. 💡 Want to sell more with every order? Meet YayBoost – Sales Booster for WooCommerce 🎉 It adds powerful upsell and cross-sell features to your WooCommerce store: free shipping nudge, product recommendations, order bumps, and post-purchase offers that convert. Try free version here ↗ 💎 PREMIUM-ONLY FEATURES Advanced Product Addons Multiple field types are built in the premium version: Image swatches Button (multi selectable) Swatches (multi selectable) Date picker Time picker File Upload Grouping and Bundling Products Similar to “related products,” you can easily use an existing product as a swatch or option for another product. Assign the “Custom Stickers” product as an additional option for a range of “Bag” products. Offer a “Matched Cap” as an optional add-on for a “Baseball T-Shirt” to create a coordinated set. Quickly set up product bundles and upsell opportunities to maximize sales. 🔑 ENHANCED SETTINGS Each field type comes with various elements to help you enhance the extra product options: Required field: Require the customer to select an option or enter the information so it can be passed through in the order (Free) Placeholder: Add help text or expected value to be entered in the field (Free) Set as default: Enable a specific option value to be selected upon product page load (Free) Custom image: Use uploaded swatch image to show on product featured image (Premium-only) File upload: Add a single or multiple file uploads, make file uploads mandatory or optional, and many other options. File upload: Allow specific file formats like PNG, JPG, PDF, DOC, XLS, etc.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C