What’s Vulnerable › Products

YayCommerce YayMail vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your YayCommerce YayMail version is affected

Latest YayCommerce YayMail vulnerabilities

• CVE-2026-42701 — WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability (CVSS 7.2)
• CVE-2026-39496 — WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2026-27327 — WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability (CVSS 4.3)