PLUGIN SECURITY

Is Yaypricing safe?

Your all-in-one WooCommerce dynamic pricing toolkit. From Buy X Get Y to tiered and bundle discounts, create powerful rules that boost sales with ease …

What this plugin does

  • Slug: yaypricing
  • Author: YayCommerce
  • 3000+ active installs
  • 100/100 rating (72 reviews on wordpress.org)
  • 63529 all-time downloads
  • On WordPress.org since 2023-03-28

bogocart feecoupondiscountsdynamic pricing

Maintenance status

  • Latest known version: 3.5.7.2
  • Last updated: 2026-08-23 9:43am GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 5.7+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

3 known CVEs on file for Yaypricing.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-15230 YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing] < 3.5.7 Improper Access Control Unknown < 3.5.7 3.5.7 2026-08-05 ✓ fixed in latest
CVE-2025-60077 YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing] < 3.5.4 Missing Authorization High 7.5 < 3.5.4 3.5.4 2025-08-29 ✓ fixed in latest
YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing] < 3.5.7 Unknown < 3.5.7 3.5.7 0000-00-00 ✓ fixed in latest
CVE-2026-66442 YayPricing < 3.5.7 - Missing Authorization Unknown < 3.5.7 3.5.7 ✓ fixed in latest

How to fix it

Keep Yaypricing updated — 3.5.7.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.