YW
Product
YayMail – WooCommerce Email Customizer
by yaycommerce · last CVE Feb 18, 2026
4
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch

Add YayMail – WooCommerce Email Customizer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1937
7.2
0%
Feb 18
YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action
Affected: through 4.3.2
Showing 1