YayMail – WooCommerce Email Customizer
yaymail · plugin
Known security vulnerabilities for YayMail – WooCommerce Email Customizer. Find out in seconds which version runs on your site with WP Lens.
7 known vulnerabilities
1 with public exploit code · latest Jun 15, 2026
Vulnerabilities
- High 7.6
WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability
- High 7.2
WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability
- High 7.2
YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action
- Medium 5.3
YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint
- Medium 4.4
YayMail <= 4.3.2 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Template Elements
- Medium 4.3
WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability
- Low 2.7
YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Plugin Installation and Activation