Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

YayMail – WooCommerce Email Customizer — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in YayMail – WooCommerce Email Customizer, with AI-generated Chinese analysis, references, and POCs.

Vendor: yaycommerce

CVE IDTitleCVSSSeverityPublished
CVE-2026-1831 YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Plugin Installation and Activation CWE-862 2.7 Low2026-02-18
CVE-2026-1943 YayMail <= 4.3.2 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Template Elements CWE-79 4.4 Medium2026-02-18
CVE-2026-1938 YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint CWE-862 5.3 Medium2026-02-18
CVE-2026-1937 YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action CWE-862 7.2 High2026-02-18

All 4 known CVE vulnerabilities affecting YayMail – WooCommerce Email Customizer with full Chinese analysis, references, and POCs where available.