CVE Intelligence

YayCommerce YayCurrency vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting YayCommerce YayCurrency: 2 record(s), with affected versions and fixes.

CVE-2025-67994 High · 7.5 CWE-862 Feb 20, 2026
WordPress YayCurrency plugin <= 3.3 - Arbitrary Content Deletion vulnerability
Missing Authorization vulnerability in YayCommerce YayCurrency yaycurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayCurrency: from n/a through <= 3.3.
CVE-2025-60114 Medium · 6.6 CWE-94 Sep 26, 2025
WordPress YayCurrency plugin <= 3.3.1 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in YayCommerce YayCurrency yaycurrency allows Code Injection.This issue affects YayCurrency: from n/a through <= 3.3.1.