Advisories · Technology

YayCommerce YayCurrency.

Every CVE that names YayCommerce YayCurrency among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-67994 CVE record

CVSS 7.5 High

WordPress YayCurrency plugin <= 3.3 - Arbitrary Content Deletion vulnerability
- YayCommerce YayCurrency
- Broken access control
Not analysed yet 20 Feb 2026
CVE-2025-60114 CVE record

CVSS 6.6 Medium

WordPress YayCurrency plugin <= 3.3.1 - Remote Code Execution (RCE) vulnerability
- YayCommerce YayCurrency
- Code injection
Not analysed yet 26 Sept 2025