What’s Vulnerable › Products

YayPricing vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your YayPricing version is affected

Latest YayPricing vulnerabilities

• CVE-2026-87888 — YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Route (CVSS 8.0)
• CVE-2026-15230 — YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure (CVSS 8.1)