CVE-2026-1937

🔴 Vulnerability Overview CVE-2026-1937 — Missing Authorization → Arbitrary Options Update → Privilege Escalation Field| Details ---|--- CVE ID| CVE-2026-1937 Severity| HIGH — CVSS v3.1 Score: 7.2 Vector| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Researcher| Daniel Basta whizzu —...

CVE-2026-42701

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

CVE-2026-42701 WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

EUVD-2026-112947

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

CVE-2026-42701

The YayMail WordPress plugin, specifically versions

CVE-2026-42701 WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

CVE-2026-42701: YayCommerce YayMail: Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

WordPress YayMail deserialization injection vulnerability

WordPress YayMail versions 4.4.6 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection in the Shop Manager...

PT-2026-132264

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin YayMail versions = 4.4.6...

EUVD-2026-36945

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

CVE-2026-39498

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

CVE-2026-39498 WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

CVE-2026-39498

The Connected document identifies CVE-2026-39498-related details: a PHP Object Injection vulnerability in the WordPress YayMail plugin , affecting versions ≤ 4.3.3 and discovered by daroo . No additional root-cause, impact, exploit, or remediation details are provided in the sources. Monitor for ...

CVE-2026-39498 WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

CVE-2026-39498: Deserialization of Untrusted Data

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

PT-2026-49385

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin YayMail versions = 4.3.3...

Exploit for CVE-2026-1937

CVE-2026-1937 YayMail = 4.3.2 - Missing Authorization to A...

CVE-2026-39496

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a through = 4.3.3...