YA
Product
YayMail
by YayCommerce · last CVE Oct 29, 2026
3
CVEs
0
On KEV
7.6
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add YayMail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39496
7.6
0%
Apr 8
WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability
Affected: through 4.3.3
CVE-2026-42701
New
7.2–Oct 29
WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability
Affected: through 4.4.6
Showing 2