CVE-2026-66442MEDIUM NVDCVSS Score 5.4Severity MEDIUMPublished Jul 27, 2026Vendor unknownDescriptionSubscriber Broken Access Control in YayPricing <= 3.5.6 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/yaypricing/vulnerability/wordpress-yaypricing-plugin-3-5-6-broken-access-control-vulnerability?_s_id=cve