YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports vulnerabilities

1 known vulnerability in YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports from YayCommerce. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  YaySMTP – WP Mail SMTP with Email Logs…: Unrestricted Upload of File with Dangerous Type

  CVE-2026-92553Oct 16, 2026YayCommerce

  The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile fun