What’s Vulnerable › Products

yaycommerce YayMail – WooCommerce Email Customizer vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your yaycommerce YayMail – WooCommerce Email Customizer version is affected

Latest yaycommerce YayMail – WooCommerce Email Customizer vulnerabilities

• CVE-2026-1943 — YayMail <= 4.3.2 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Template Elements (CVSS 4.4)
• CVE-2026-1938 — YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint (CVSS 5.3)
• CVE-2026-1831 — YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Plugin Installation and Activation (CVSS 2.7)
• CVE-2026-1937 — YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action (CVSS 7.2)