SMTP for Amazon SES – YaySMTP vulnerabilities

2 known vulnerabilities in SMTP for Amazon SES – YaySMTP from YayCommerce. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  SMTP for Amazon SES – YaySMTP: Improper Neutralization of Input During Web Page Generation

  CVE-2025-3434Apr 11, 2025YayCommerce

  The SMTP for Amazon SES – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Logs in all versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated

• 7.2 High severity

  SMTP for Amazon SES – YaySMTP: Improper Neutralization of Input During Web Page Generation

  CVE-2025-0957Feb 22, 2025YayCommerce

  The SMTP for Amazon SES – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje