SQL Injection

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. WordPress YaySMTP plugin <= 2.6.4 - SQL Injection VulnerabilityCVE-2025-47587YayCommerce · CVSS 7.6 · 0.4% likely

   CWE-89

2. WordPress YaySMTP plugin <= 2.6.6 - SQL Injection VulnerabilityCVE-2025-53256YayCommerce · CVSS 7.6 · 0.4% likely

   CWE-89

3. WordPress SMTP for SendGrid – YaySMTP plugin <= 1.5 - SQL Injection VulnerabilityCVE-2025-48301YayCommerce · CVSS 7.6 · 0.4% likely

   CWE-89

4. WordPress YayExtra plugin <= 1.5.5 - SQL Injection VulnerabilityCVE-2025-48299YayCommerce · CVSS 7.6 · 0.4% likely

   CWE-89

5. WordPress YaySMTP plugin <= 1.3 - SQL Injection VulnerabilityCVE-2025-48161YayCommerce · CVSS 7.6 · 0.4% likely

   CWE-89

6. YaySMTP <= 2.7.8 - Authenticated (Administrator+) SQL Injection via 'params[searchKey]' ParameterCVE-2026-109977yaycommerce · CVSS 4.9 · 0.4% likely

   CWE-89

7. WordPress SMTP for Amazon SES plugin <= 1.9 - SQL Injection VulnerabilityCVE-2025-54043YayCommerce · CVSS 7.6 · 0.3% likely

   CWE-89

8. WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerabilityCVE-2026-39496YayCommerce · CVSS 7.6 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.