YW
Product
YayMail – WooCommerce Email Customizer
4
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch
Add YayMail – WooCommerce Email Customizer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1938 | 5.3 | Feb 18 | YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint Affected: through 4.3.2 |
| CVE-2026-1943 | 4.4 | Feb 18 | YayMail <= 4.3.2 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Template Elements Affected: through 4.3.2 |
Showing 2