Lucene search
K

59 matches found

EUVD
EUVD
added 2026/06/15 9:30 p.m.5 views

EUVD-2026-36945

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

7.2CVSS5.3AI score0.00359EPSS
Exploits0References2
NVD
NVD
added 2026/06/15 9:16 p.m.6 views

CVE-2026-39498

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

7.2CVSS0.00359EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/15 8:17 p.m.25 views

CVE-2026-39498 WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

7.2CVSS0.00359EPSS
Exploits0References1
CVE
CVE
added 2026/06/15 8:17 p.m.12 views

CVE-2026-39498

The Connected document identifies CVE-2026-39498-related details: a PHP Object Injection vulnerability in the WordPress YayMail plugin , affecting versions ≤ 4.3.3 and discovered by daroo . No additional root-cause, impact, exploit, or remediation details are provided in the sources. Monitor for ...

7.2CVSS5.3AI score0.00359EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.9 views

PT-2026-49385

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

7.2CVSS5.3AI score0.00359EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/04/20 3:40 p.m.6 views

WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin YayMail versions = 4.3.3...

5.8AI score0.00359EPSS
Exploits0Affected Software1
GithubExploit
GithubExploit
added 2026/04/18 9:25 a.m.109 views

Exploit for CVE-2026-1937

CVE-2026-1937 YayMail = 4.3.2 - Missing Authorization to A...

7.2CVSS6.1AI score0.00411EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.5 views

CVE-2026-39496

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...

7.6CVSS5.9AI score0.00279EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.4 views

EUVD-2026-20162

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...

5.9AI score0.00279EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.0 views

CVE-2026-39496

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...

7.6CVSS0.00279EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.2 views

CVE-2026-39496

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...

5.9AI score0.00279EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.1 views

CVE-2026-39496 WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...

5.9AI score0.00279EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.21 views

CVE-2026-39496 WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...

7.6CVSS0.00279EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.7 views

CVE-2026-39496

CVE-2026-39496 is a SQL Injection vulnerability in the WordPress plugin YayMail (YayCommerce) "yaymail" affecting versions from n/a up to and including 4.3.3. The root cause is improper neutralization of special elements used in SQL commands, leading to Blind SQL Injection. The connected records ...

7.6CVSS5.9AI score0.00279EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.4 views

PT-2026-31129

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...

5.9AI score0.00279EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.4 views

WordPress plugin YayMail SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.6CVSS5.9AI score0.00279EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 1:31 a.m.8 views

CVE-2026-27327

Missing Authorization vulnerability in YayCommerce YayMail yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayMail: from n/a through = 4.3.2...

4.3CVSS5.9AI score0.002EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:18 p.m.6 views

CVE-2026-27327

Missing Authorization vulnerability in YayCommerce YayMail yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayMail: from n/a through = 4.3.2...

4.3CVSS0.002EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:35 p.m.9 views

CVE-2026-27327

The CVE-2026-27327 entry concerns the WordPress YayMail – WooCommerce Email Customizer plugin (YayMail) version &lt;= 4.3.2, where a Missing Authorization/ Broken Access Control vulnerability exists due to incorrectly configured access control security levels. Affected component is the YayMail pl...

4.3CVSS5.9AI score0.002EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:35 p.m.4 views

CVE-2026-27327

Missing Authorization vulnerability in YayCommerce YayMail – WooCommerce Email Customizer yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayMail – WooCommerce Email Customizer: from n/a through = 4.3.2...

5.5AI score0.002EPSS
Exploits0References2
Rows per page
Query Builder