yaysmtp_wp_mail_smtp_with_email_logs_tracking_reports vulnerabilities

CVEs whose affected-version data names the yaysmtp_wp_mail_smtp_with_email_logs_tracking_reports package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92553High· 8.8

yesterday

YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension

The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type valida…

▾ Twilightyaycommerce · YaySMTP – WP Mail SMTP with Email Logs, Tracking & ReportsEPSS 0.57%via CVEORG