7.2
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
CVE-2026-1937 YayMail = 4.3.2 - Missing Authorization to Authenticated Shop Manager+ Arbitrary Options Update via 'yaymailimportstate' AJAX Action --- 🔴 Vulnerabilities Overview --- ① CVE-2025-13407 — Gravity Forms Unauthenticated Chunked File Upload...
Basic Information
ID
D3A2217C-DCF2-5A65-A0E0-27206B8A2B1D
Published
Apr 18, 2026 at 09:25
Modified
Apr 18, 2026 at 09:27