CVE-2026-42701: Shop manager PHP Object Injection in… – CVSS 7.2 · Watchpost

← All vulnerabilities

CVE-2026-42701

高危 7.2CVE-2026-42701 · Published 29/10/2026 · updated 30/10/2026

要点

CVE-2026-42701 是高危 (CVSS 7.2)漏洞。
未来 30 天内被利用的概率（EPSS）：0.37%，高于 31.1% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.

References

patchstack.com/database/wordpress/plugin/yaymail/vulnerability/wordpress-yaymail-plugin-4-4-6-php-object-injection-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free