YayPricing vulnerabilities
We track 2 vulnerabilities in YayPricing products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest YayPricing vulnerabilities
- 8.0 High severity
YayPricing: Improper Neutralization of Input During Web Page Generation
The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens
- 8.1 High severity
YayPricing: Improper Access Control
The YayPricing WordPress plugin before 3.5.7 does not perform capability checks on several of its REST API routes, relying only on a shared nonce, allowing any authenticated user such as a subscriber to overwrite the store's pricing configuration and to disclo