Login Request a demo
YA
Product
YaySMTP
by YayCommerce · last CVE Jul 16, 2025
11
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 3Medium 8Low 0
Severity
All severities11Critical0High3Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add YaySMTP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-48161
7.6
0%
Jul 16
WordPress YaySMTP plugin <= 1.3 - SQL Injection Vulnerability
Affected: through 1.3
CVE-2025-53256
7.6
0%
Jun 27
WordPress YaySMTP plugin <= 2.6.6 - SQL Injection Vulnerability
Affected: through 2.6.6
CVE-2025-47587
7.6
0%
May 7
WordPress YaySMTP plugin <= 2.6.4 - SQL Injection Vulnerability
Affected: through 2.6.4
CVE-2022-2370
6.5
1%
Aug 1
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
Affected: before 2.2.1
CVE-2025-0953
6.1
0%
Feb 22
SMTP for Sendinblue – YaySMTP <= 1.2 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Affected: before 1.2
CVE-2025-0918
6.1
0%
Feb 22
SMTP for SendGrid – YaySMTP <= 1.4 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Affected: before 1.4
CVE-2025-0916
6.1
0%
Feb 19
YaySMTP 2.4.9 - 2.6.2 - Unauthenticated Stored Cross-Site Scripting
Affected: 2.4.9 before 2.6.3
CVE-2023-3093
6.1
0%
Jul 12
The YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.4.5 due to insufficient input sanitization and…
Affected: before 2.4.6
CVE-2022-2371
5.4
1%
Aug 8
YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting
Affected: before 2.2.1
CVE-2022-2372
4.8
1%
Aug 8
YaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting
Affected: before 2.2.2
CVE-2022-2369
4.3
1%
Aug 1
YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure
Affected: before 2.2.1
Showing 11