Yaycommerce Yaymail vulnerabilities
- yaycommerce yaymail WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability 7.2 High
- yaycommerce yaymail WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability 7.2 High
- yaycommerce yaymail WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability 7.6 High
- yaycommerce yaymail WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability 4.3 Medium
- yaycommerce yaymail – woocommerce email customizer YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Plugin Installation and Activation 2.7 Low
- yaycommerce yaymail – woocommerce email customizer YayMail <= 4.3.2 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Template Elements 4.4 Medium
- yaycommerce yaymail – woocommerce email customizer YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint 5.3 Medium
- yaycommerce yaymail – woocommerce email customizer YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action 7.2 High