CVE-2026-42701HIGH NVDCVSS Score 7.2Severity HIGHPublished Oct 29, 2026Vendor unknownDescriptionShop manager PHP Object Injection in YayMail <= 4.4.6 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/yaymail/vulnerability/wordpress-yaymail-plugin-4-4-6-php-object-injection-vulnerability?_s_id=cve