CVE-2026-75799

Name of the Vulnerable Software and Affected Versions YAHMAN Add-ons WordPress plugin versions prior to 0.9.31

Description The plugin fails to validate the type of remote files it caches within a publicly accessible directory. This allows unauthenticated attackers to write arbitrary PHP files to the server, potentially leading to Remote Code Execution (RCE), which is the ability to execute arbitrary commands on a remote machine, when the relevant feature is enabled.

Recommendations Update YAHMAN Add-ons WordPress plugin to version 0.9.31 or later.