Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

YayCommerce

YayCommerce YayMail vulnerabilities

3 published CVEs name YayCommerce YayMail among the affected products.

Newest CVEs

  • CVE-2026-42701

    WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability

    YayCommerce · YayMail

    High7.2
  • CVE-2026-39496

    WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability

    YayCommerce · YayMail

    High7.6
  • CVE-2026-27327

    WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability

    YayCommerce · YayMail

    Medium4.3