They are both correct and I can't see much (if any) difference between the two.
"The worst is yet to come" gets about 4 times more hits on google than "The worst has yet to come". I suspect that it is because the "is" version is a little more natural to contemporary users of English.