CVE-2026-15230 | YayPricing Plugin up to 3.5.6 on WordPress REST API Routes access control

August 5, 2026 Yanac

A vulnerability, which was classified as critical, has been found in YayPricing Plugin up to 3.5.6 on WordPress. This vulnerability affects unknown code of the component REST API Routes. Performing a manipulation results in improper access controls.

This vulnerability is reported as CVE-2026-15230. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More