CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The YayMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized plugin installation and activation due to missing capability checks on the 'yaymail_install_yaysmtp' AJAX action and `/yaymail/v1/addons/activate` REST endpoint in all versions up to, and including, 4.3.2. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to install and activate the YaySMTP plugin.
Explanation of Vulnerability in Simple Terms
YayMail versions up to 4.3.2 lack proper authorization checks on certain administrative functions. A high-privileged user (such as a site administrator) can modify email settings in ways that exceed their intended permissions. The vulnerability has low integrity impact and requires administrative access to exploit.
What an attacker can do
Modify email customization settings beyond their authorized scope.
Potential impact on your site
A rogue admin or compromised admin account could alter WooCommerce email templates or settings inappropriately.
Conditions required to exploit
Attacker must have high-level administrative privileges on the WordPress site.
Key dates
External resources
