Advisories · Technology

YayCommerce YayMail.

Every CVE that names YayCommerce YayMail among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42701 CVE record

CVSS 7.2 High

WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability
- YayCommerce YayMail
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2026-39496 CVE record

CVSS 7.6 High

WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability
- YayCommerce YayMail
- SQL injection
Not analysed yet 8 Apr 2026
CVE-2026-27327 CVE record

CVSS 4.3 Medium

WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability
- YayCommerce YayMail
- Broken access control
Not analysed yet 19 Feb 2026