Skip to content
PluginCanary

YayExtra

YayExtra - WooCommerce Extra Product Options
by YayCommerce · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 9 Sep 2026, 11 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for YayExtra
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Quick answers

Is YayExtra still maintained?
Yes. Last release 9 Sep 2026, 11 releases in the last 24 months. 9 Sep 2026 · wordpress.org
Who owns YayExtra, and has it changed hands?
No change recorded. Main committer yaycommerce since Aug 2022. 3 Nov 2026 · SVN log
Was YayExtra removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is YayExtra safe?
3 known vulnerabilities, all fixed (latest in 1.5.6). Not on the exploited list. 16 Jul 2025 · Wordfence Intelligence
Is the latest YayExtra update safe to install?
No ownership change before 2.1.0. No one-star spike after it. 9 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master26 Aug 2022 to 26 Aug 2022, 1 commits
yaycommerce26 Aug 2022 to 9 Sep 2026, 74 commits

2 committers recorded. No ownership change since 2022.

Maintenance

Last release
56 days ago
Releases, 24 months
11
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for YayExtra
Q1 20242
Q2 20241
Q3 20244
Q4 20240
Q1 20252
Q2 20251
Q3 20251
Q4 20252
Q1 20263
Q2 20261
Q3 20261
Q4 20260

Last release 9 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star23
4 star0
3 star0
2 star0
1 star1

Security record

2 vulnerabilities in 24 months (3 on record), all patched (latest fixed in 1.5.6).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Jul 2025YayExtra <= 1.5.5 - Authenticated (Administrator+) SQL Injection4.9<= 1.5.51.5.691
31 Mar 2025YayExtra <= 1.5.2 - Missing Authorization4.3<= 1.5.21.5.386
2 Aug 2024YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function9.8<= 1.3.71.3.830

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for YayExtra
4 May 202644
11 May 2026117
18 May 2026893
25 May 2026179
1 Jun 2026129
8 Jun 2026166
15 Jun 2026118
22 Jun 202684
29 Jun 202673
6 Jul 2026115
13 Jul 202694
20 Jul 202696
27 Jul 2026137
3 Aug 2026120
10 Aug 2026141
17 Aug 2026143
24 Aug 2026137
31 Aug 2026119
7 Sep 2026797
14 Sep 2026320
21 Sep 2026236
28 Sep 2026165
5 Oct 2026143
12 Oct 2026187
19 Oct 2026201
26 Oct 2026184
2 Nov 202628

Weekly downloads over the last 4 weeks are 22% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Extra Product Options For WooCommerceScore 92 · 30,000+Flexible Product Fields (WooCommerceScore 92 · 10,000+Product Addons for WoocommerceScore 90 · 30,000+YITH WooCommerce Product Add-OnsScore 89 · 20,000+

Facts

Version2.1.0
AuthorYayCommerce
Added26 Aug 2022
Last updated9 Sep 2026
Active installs1,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.2
CategoryE-commerce & Shopping > Product Management & Catalogs
TagsProduct Addons, product customizer, extra product options, WooCommerce product fields, woocommerce product options

Other plugins by this author: YayMail - WooCommerce Email Customizer, YaySMTP - WP Mail SMTP with Email Logs, Tracking & Reports, YayCurrency - WooCommerce Multi-Currency Switcher, YayPricing - WooCommerce Dynamic Pricing & Discounts, SMTP for Amazon SES - YaySMTP, SMTP for SendGrid - YaySMTP, YaySwatches - Variation Swatches for WooCommerce, Brevo SMTP - YaySMTP, YayReviews - Advanced Customer Reviews for WooCommerce, Brandy Blocks, YayBoost - Sales Booster for WooCommerce, Brandy Sites - 20+ WooCommerce Website Starter Templates

Questions

Is YayExtra still maintained?

Yes. Last release 9 Sep 2026, 11 releases in the last 24 months.

Who owns YayExtra, and has it changed hands?

No change recorded. Main committer yaycommerce since Aug 2022.

Was YayExtra removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is YayExtra safe?

3 known vulnerabilities, all fixed (latest in 1.5.6). Not on the exploited list.

Is the latest YayExtra update safe to install?

No ownership change before 2.1.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue