Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.8The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7…CVE-2026-92553 · CVE.org · NIST NVD · nginx, WordPressOct 16, 2026
High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue…CVE-2026-39496 · CVE.org · NIST NVDApr 8, 2026
High7.5Missing Authorization vulnerability in YayCommerce YayCurrency yaycurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Y…CVE-2025-67994 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Feb 20, 2026