VendorsYayCommerceyaysmtpany version
Vulnerabilities

YayCommerce YaySMTP any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2023-3093
YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email
Published 2023-07-12 · Modified
7.2EPSS 0.005
CVE-2025-0916
YaySMTP 2.4.9 - 2.6.2 - Unauthenticated Stored Cross-Site Scripting
Published 2025-02-19 · Analyzed
7.2EPSS 0.004
CVE-2025-0918
SMTP for SendGrid – YaySMTP <= 1.4 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Published 2025-02-22 · Modified
7.2EPSS 0.004
CVE-2025-0953
SMTP for Sendinblue – YaySMTP <= 1.2 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Published 2025-02-22 · Modified
7.2EPSS 0.004
CVE-2022-2370
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
Published 2022-08-01 · Modified
6.5EPSS 0.009
CVE-2022-2371
YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting
Published 2022-08-08 · Modified
5.4EPSS 0.006
CVE-2022-2372
YaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting
Published 2022-08-08 · Modified
4.8EPSS 0.006
CVE-2022-2369
YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure
Published 2022-08-01 · Modified
4.3EPSS 0.007