Description
Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YayCommerce | YayPricing | ≤ 3.5.6 | — |
Medium · 5.4
CVE-2026-66442
EUVD-2026-49246GHSA-4wp7-5696-hwhj
WordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerability
Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack