Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

131 matches found

RedhatCVE
RedhatCVE•added 2025/02/24 1:29 p.m.•11 views

CVE-2025-0953

The SMTP for Sendinblue – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

7.2CVSS7.4AI score0.00352EPSS
SaveExploits0References1
NVD
NVD•added 2025/02/22 2:15 p.m.•14 views

CVE-2025-0957

The SMTP for Amazon SES – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

7.2CVSS0.00488EPSS
SaveExploits0References5
Patchstack
Patchstack•added 2025/02/22 1:37 p.m.•10 views

WordPress YaySMTP plugin <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email Logs vulnerability

Unauthenticated Stored Cross-Site Scripting via Email Logs vulnerability discovered by Cristian Bejan cbejan in WordPress Plugin YaySMTP versions = 1.1.1...

7.2CVSS5.8AI score0.00352EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2025/02/22 1:36 p.m.•16 views

WordPress YaySMTP plugin <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via Email Logs vulnerability

Unauthenticated Stored Cross-Site Scripting via Email Logs vulnerability discovered by Cristian Bejan cbejan in WordPress Plugin SMTP for SendGrid – YaySMTP versions = 1.3.1...

7.2CVSS5.8AI score0.00355EPSS
SaveExploits0References1Affected Software1
OSV
OSV•added 2025/02/22 1:15 p.m.•10 views

CVE-2025-0953

The SMTP for Sendinblue – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

6.1CVSS6AI score0.00352EPSS
SaveExploits0References5
NVD
NVD•added 2025/02/22 1:15 p.m.•18 views

CVE-2025-0918

The SMTP for SendGrid – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that wi...

7.2CVSS0.00355EPSS
SaveExploits0References4
CVE
CVE•added 2025/02/22 12:39 p.m.•96 views

CVE-2025-0953

The CVE-2025-0953 entry concerns the SMTP for Sendinblue – YaySMTP WordPress plugin. It describes a Stored Cross-Site Scripting (XSS) flaw in versions up to 1.1.1 caused by insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts that execute when ...

7.2CVSS7.4AI score0.00352EPSS
SaveExploits0References5Affected Software1
CVE
CVE•added 2025/02/22 12:39 p.m.•117 views

CVE-2025-0918

CVE-2025-0918 — SMTP for SendGrid – YaySMTP (WordPress) is affected by a Stored XSS in versions

7.2CVSS7.4AI score0.00355EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment•added 2025/02/22 12:39 p.m.•12 views

CVE-2025-0918 SMTP for SendGrid – YaySMTP <= 1.4 - Unauthenticated Stored Cross-Site Scripting via Email Logs

The SMTP for SendGrid – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that wi...

7.2CVSS7.4AI score0.00355EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2025/02/22 12:39 p.m.•31 views

CVE-2025-0918 SMTP for SendGrid – YaySMTP <= 1.4 - Unauthenticated Stored Cross-Site Scripting via Email Logs

The SMTP for SendGrid – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that wi...

7.2CVSS0.00355EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2025/02/22 12:39 p.m.•17 views

CVE-2025-0953 SMTP for Sendinblue – YaySMTP <= 1.2 - Unauthenticated Stored Cross-Site Scripting via Email Logs

The SMTP for Sendinblue – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

7.2CVSS7.4AI score0.00352EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2025/02/22 12:39 p.m.•26 views

CVE-2025-0953 SMTP for Sendinblue – YaySMTP <= 1.2 - Unauthenticated Stored Cross-Site Scripting via Email Logs

The SMTP for Sendinblue – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

7.2CVSS0.00352EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies•added 2025/02/22 12:00 a.m.•14 views

PT-2025-7477

Name of the Vulnerable Software and Affected Versions The SMTP for SendGrid – YaySMTP plugin for WordPress versions up to, and including, 1.3.1 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

7.2CVSS8.6AI score0.00355EPSS
SaveExploits0References14
RedhatCVE
RedhatCVE•added 2025/02/21 11:26 a.m.•17 views

CVE-2025-0916

The YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 2.4.9 to 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

7.2CVSS6AI score0.00374EPSS
SaveExploits0References1
NVD
NVD•added 2025/02/19 12:15 p.m.•29 views

CVE-2025-0916

The YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 2.4.9 to 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

7.2CVSS0.00374EPSS
SaveExploits0References5
OSV
OSV•added 2025/02/19 12:15 p.m.•13 views

CVE-2025-0916

The YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 2.4.9 to 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

6.1CVSS5.9AI score0.00374EPSS
SaveExploits0References5
CVE
CVE•added 2025/02/19 11:10 a.m.•72 views

CVE-2025-0916

CVE-2025-0916 concerns the WordPress plugin family “YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service”. Connected sources confirm a stored XSS vulnerability in versions 2.4.9 through 2.6.2 caused by insufficient input sanitization and output escapi...

7.2CVSS6.3AI score0.00374EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist•added 2025/02/19 11:10 a.m.•35 views

CVE-2025-0916 YaySMTP 2.4.9 - 2.6.2 - Unauthenticated Stored Cross-Site Scripting

The YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 2.4.9 to 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

7.2CVSS0.00374EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment•added 2025/02/19 11:10 a.m.•12 views

CVE-2025-0916 YaySMTP 2.4.9 - 2.6.2 - Unauthenticated Stored Cross-Site Scripting

The YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 2.4.9 to 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

7.2CVSS6.2AI score0.00374EPSS
SaveExploits0References5
Patchstack
Patchstack•added 2025/02/19 12:02 a.m.•12 views

WordPress YaySMTP plugin 2.4.9-2.6.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin YaySMTP versions 2.4.9-2.6.2...

7.2CVSS5.7AI score0.00374EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder