CVE-2026-27066

✕ Withdrawn — historical dataMEDIUMNVD 5.3
5.3CVSS

Missing Authorization vulnerability in PI Web Solution Live sales notification for WooCommerce live-sales-notifications-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live sales notification for WooCommerce: from n/a through <= 2.3.60.

CVSS v3
5.3
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

February 19, 2026

Last Modified

April 28, 2026

Frequently asked(4)

What is CVE-2026-27066?
CVE-2026-27066 is a rejected CVE ID: its record was withdrawn on June 11, 2026 and no longer describes a vulnerability. Reason given: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
When was the CVE record for CVE-2026-27066 published?
The CVE record for CVE-2026-27066 was published on February 19, 2026. EchelonGraph's copy of the record carries a last-modified date of April 28, 2026; the record at its source may have been updated since.
What is the CVSS score of CVE-2026-27066?
CVE-2026-27066 has a CVSS v3 base score of 5.3 (NVD).
How do I remediate CVE-2026-27066?
There is nothing to remediate under CVE-2026-27066: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.