CVE-2026-87888
YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Route
CVSS Score
8.0
EPSS Score
0.0%
EPSS Percentile
0th
The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the YayPricing WordPress plugin before 3.5.7's settings page.
| Vendor | unknown |
| Product | yaypricing |
| Published | Sep 12, 2026 |
| Last Updated | Sep 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown yaypricing
Be the first to know when new high vulnerabilities affecting unknown yaypricing are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / YayPricing
0 < 3.5.7
References
Credits
Artus KG WPScan