Skip to content
OpenAdvisories

Vendor

YayCommerce

28 known vulnerabilities.

Products

YayMail – WooCommerce Email Customizer 4 YayMail 3 YaySMTP 3 YayCurrency 2 SMTP for Amazon SES – YaySMTP 2 YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports 2 YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service 2 YayExtra 2 SMTP for SendGrid – YaySMTP 2 YayPricing 2 Brand 1 SMTP for Amazon SES 1 SMTP for Sendinblue – YaySMTP 1 YayExtra – WooCommerce Extra Product Options 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-1937 Public exploit

    YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action

    The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the `yaymail_import_state` AJAX action in all versions up to, and inc…

    YayCommerce YayMail – WooCommerce Email Customizer Web / CMS