CVE Intelligence

YayCommerce YayPricing vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting YayCommerce YayPricing: 2 record(s), with affected versions and fixes.

CVE-2026-66442 Medium · 5.4 CWE-862 Jul 27, 2026
WordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.
CVE-2025-60077 High · 7.5 CWE-862 Dec 18, 2025
WordPress YayPricing plugin <= 3.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in YayCommerce YayPricing yaypricing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects YayPricing: from n/a through <= 3.5.3.