Log out
Get PRO

Latest

Input validation vulnerability in SMTP for Sendinblue – YaySMTP 1.3

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 16, 2025

The YaySMTP plugin for WordPress has a security issue that allows hackers to access sensitive information from the database. This vulnerability is present in versions 1.3 and below, as the plugin does not properly handle certain user input and SQL queries. Attackers with administrator-level access or higher can exploit this and add their own malicious SQL queries to extract data from the database.

Detected in:

SMTP for Sendinblue – YaySMTP fixed vulnerable versions: >= * <= 1.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.