Skip to content
OpenAdvisories

Vendor

YayCommerce

28 known vulnerabilities.

Products

YayMail – WooCommerce Email Customizer 4 YayMail 3 YaySMTP 3 YayCurrency 2 SMTP for Amazon SES – YaySMTP 2 YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports 2 YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service 2 YayExtra 2 SMTP for SendGrid – YaySMTP 2 YayPricing 2 Brand 1 SMTP for Amazon SES 1 SMTP for Sendinblue – YaySMTP 1 YayExtra – WooCommerce Extra Product Options 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2026-1831

    YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Plugin Installation and Activation

    The YayMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized plugin installation and activation due to missing capability checks on the 'yaymail_install_yaysmtp' AJAX action and `/yaymail/v1/addons/activate` REST endpoint in a…

    YayCommerce YayMail – WooCommerce Email Customizer Web / CMS