CVE Intelligence

YayCommerce YayMail vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting YayCommerce YayMail: 2 record(s), with affected versions and fixes.

CVE-2026-39496 High · 7.6 CWE-89 Apr 8, 2026
WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through <= 4.3.3.
CVE-2026-27327 Medium · 4.3 CWE-862 Feb 19, 2026
WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in YayCommerce YayMail yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayMail: from n/a through <= 4.3.2.