Skip to contentYaycommerce Yaysmtp vulnerabilities
- yaycommerce yaysmtp – wp mail smtp with email logs, tracking & reportsYaySMTP <= 2.7.8 - Authenticated (Administrator+) SQL Injection via 'params[searchKey]' ParameterCVE-2026-1099774.9 Medium
- yaycommerce yaysmtp – wp mail smtp with email logs, tracking & reportsYaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename ExtensionCVE-2026-925538.8 High
- yaycommerce yaysmtpWordPress YaySMTP plugin <= 1.3 - SQL Injection VulnerabilityCVE-2025-481617.6 High
- yaycommerce smtp for sendgrid – yaysmtpWordPress SMTP for SendGrid – YaySMTP plugin <= 1.5 - SQL Injection VulnerabilityCVE-2025-483017.6 High
- yaycommerce yaysmtpWordPress YaySMTP plugin <= 2.6.6 - SQL Injection VulnerabilityCVE-2025-532567.6 High
- yaycommerce yaysmtpWordPress YaySMTP plugin <= 2.6.4 - SQL Injection VulnerabilityCVE-2025-475877.6 High
- yaycommerce smtp for amazon ses – yaysmtpSMTP for Amazon SES – YaySMTP <= 1.8 - Unauthenticated Stored Cross-Site Scripting via Email LogsCVE-2025-34347.2 High
- yaycommerce smtp for amazon ses – yaysmtpVulnerability: SMTP for Amazon SES <= 1.8 - Unauthenticated Stored Cross-Site Scripting via Email LogsCVE-2025-09577.2 High
- yaycommerce smtp for sendinblue – yaysmtp, yaysmtp +1 moreSMTP for Sendinblue – YaySMTP <= 1.2 - Unauthenticated Stored Cross-Site Scripting via Email LogsCVE-2025-09537.2 High
- yaycommerce smtp for sendgrid – yaysmtp, yaysmtp +1 moreSMTP for SendGrid – YaySMTP <= 1.4 - Unauthenticated Stored Cross-Site Scripting via Email LogsCVE-2025-09187.2 High
- yaycommerce yaysmtp, yaysmtp and email logs: amazon ses, sendgrid, outlook, mailgun, brevo, google and any smtp service +1 moreYaySMTP 2.4.9 - 2.6.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-09167.2 High
- yaycommerce yaysmtp, yaysmtp and email logs: amazon ses, sendgrid, outlook, mailgun, brevo, google and any smtp service +1 moreYaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via EmailCVE-2023-30937.2 High
- yaycommerce yaysmtp, unknown yaysmtp – simple wp smtp mail +1 moreYaySMTP < 2.2.2 - Admin+ Stored Cross-Site ScriptingCVE-2022-23724.8 Medium
- yaycommerce yaysmtp, unknown yaysmtp – simple wp smtp mail +1 moreYaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site ScriptingCVE-2022-23715.4 Medium
- unknown yaysmtpYaySMTP < 2.2.1 - Subscriber+ SMTP Credentials LeakCVE-2022-23706.5 Medium
- yaycommerce yaysmtp, unknown yaysmtp – simple wp smtp mail +1 moreYaySMTP < 2.2.1 - Subscriber+ Logs DisclosureCVE-2022-23694.3 Medium