PULSEUnderground Intel

LIVE46signals / 24h

FEED

ransomsafepay reclama a hst.eu · DE · Not Foundransomsafepay reclama a braywoodschool.co.uk · GB · Educationransomsafepay reclama a weier.org · DE · Not Foundransomsafepay reclama a bnpdist.com · US · Retail & E-Commerceransomnightspire reclama a Kates Nussman Ellis Earle & Landolfi LLP · US · Professional Servicesransomchaos reclama a vit-best.com · RU · Educationransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Servicesransomqilin reclama a Wilbert's · US · Retail & E-Commerceransomdragonforce reclama a Katathani Phuket Beach Resort · TH · Hospitalityransomcrpxo reclama a IPTV Platform · US · Technology · 3.2 GBransomcrpxo reclama a Marketech · US · Technology · 6.7 GBransomcrpxo reclama a American Hospice & Home Health Services (Ahhh Care) · US · Healthcare · 11.3 GBransomsafepay reclama a hst.eu · DE · Not Foundransomsafepay reclama a braywoodschool.co.uk · GB · Educationransomsafepay reclama a weier.org · DE · Not Foundransomsafepay reclama a bnpdist.com · US · Retail & E-Commerceransomnightspire reclama a Kates Nussman Ellis Earle & Landolfi LLP · US · Professional Servicesransomchaos reclama a vit-best.com · RU · Educationransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Servicesransomqilin reclama a Wilbert's · US · Retail & E-Commerceransomdragonforce reclama a Katathani Phuket Beach Resort · TH · Hospitalityransomcrpxo reclama a IPTV Platform · US · Technology · 3.2 GBransomcrpxo reclama a Marketech · US · Technology · 6.7 GBransomcrpxo reclama a American Hospice & Home Health Services (Ahhh Care) · US · Healthcare · 11.3 GB

CVE WatchJul 27, 2026

CVE-2026-66442

Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.

CVSS

5.4

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Jul 27, 2026 · Last modified: Jul 27, 2026 · CWE-862

EPSS · 30d

Not enough EPSS history yet.

Technical description

Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/yaypricing/vulnerability/wordpress-yaypricing-plugin-3-5-6-broken-access-control-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-664775.3 MED

———Unauthenticated Broken Access Control in Gillion <= 4.13 versions.2h CVE-2026-655685.0 MED

———Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.2h CVE-2026-655675.3 MED

———Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.2h CVE-2026-654356.5 MED

———Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions.2h CVE-2026-654336.5 MED

———Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions.2h CVE-2026-595606.5 MED

———Subscriber Broken Access Control in FundEngine <= 1.7.8 versions.2h