cleantalk
Vulnerabilities and Security Researches

YaySMTP – Simple WP SMTP Mail, CVE-2025-47587

CVE, Research URL

CVE-2025-47587

Home page URL

Security reports for YaySMTP – Simple WP SMTP Mail

Application

YaySMTP – Simple WP SMTP Mail

Published on
May 07, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YaySMTP allows Blind SQL Injection. This issue affects YaySMTP: from n/a through 2.6.4.
Affected versions
Min -, max 2.6.5.
Status
vulnerable
Previous vulnerability researches
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More (CVE-2025-47501) , May 09, 2025
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More (CVE-2024-11153) , Mar 06, 2025
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More (CVE-2022-4509) , Jun 06, 2024
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More (CVE-2024-0615) , Jun 06, 2024
New vulnerability
Frontend Login and Registration Blocks (CVE-2025-3605) , May 10, 2025
WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg (CVE-2025-4206) , May 10, 2025
Top 10 – WordPress Popular posts by WebberZone (CVE-2025-47509) , May 09, 2025
Easy Replace Image (CVE-2025-47483) , May 09, 2025
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress (CVE-2025-47520) , May 09, 2025