YayCommerce YayMail – WooCommerce Email Customizer

• CVE-2026-1831 Low 2.7 YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Plugin Installation and Activation 0.3%
• CVE-2026-1943 Medium 4.4 YayMail <= 4.3.2 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Template Elements 0.3%
• CVE-2026-1938 Medium 5.3 YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint 0.3%
• CVE-2026-1937 High 7.2 YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action 0.5%