SMTP for Amazon SES – YaySMTP
SMTP for Amazon SES – YaySMTP has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include SQL Injection.
Every one of the 3 issues recorded for SMTP for Amazon SES – YaySMTP has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. SMTP for Amazon SES – YaySMTP is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-3434SMTP for Amazon SES – YaySMTP <= 1.8 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Read the full analysisVulnerability Records
SMTP for Amazon SES – YaySMTP
Author
YayCommerce
Send WordPress emails through Amazon SES server using YaySMTP Amazon Simple Email Service (SES) is a versatile mail service provider. It is a powerhouse for sending emails, but tapping into its full potential within WordPress can be tricky… until now! Introducing YaySMTP, your seamless bridge between Amazon SES and WordPress for turbocharged email delivery. It costs nothing to connect with AWS / Amazon SES. YaySMTP for WP SES comes without baffling configuration options. Any WordPress beginner can set it up successfully. Moreover, this WP SES plugin provides advanced options that you can’t find in other Amazon SES SMTP free plugins. Easy to set up: Clear interface and simple user experience. Boosted deliverability: Experience lightning-fast email sending and enhanced reliability—no more frustrating delays. Email log: Set time frame for auto-delete, show/hide columns. Email actions: Display, search, view, and delete emails easily. Send test email: One click to send an email for testing. Compact UI: Do everything without leaving the page or browser tab. Detailed tracking: Monitor email performance like a pro with comprehensive analytics and insights into opens, clicks, senders, etc. Export/Import: Quickly export your CSV files to reserve the email sending history. ⚡️ HOW IT WORKS YaySMTP plugin makes Amazon SES server and your WordPress site become friends very quickly. To enable SES SMTP for your WordPress emails, you will need to register an AWS account. Amazon’s SMTP service provider offers an affordable Pay-as-you-go plan, if not the best and cheapest. The configuration process is easy. Just follow our WP SES documentation, and it takes you only a few minutes. If you want hands-free setup support, just buy YaySMTP and let us handle all the config. Our team is always ready to help you unleash the full power of WordPress SMTP and Amazon SES. 🎏 Supported Themes and Plugins Complete compatibility with all themes, page builders, and major plugins. Perfect with YayMail – WooCommerce Email Customizer plugin. 📝 Documentation and Support If you’re having issues, do let us know, and we’ll be happy to help.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C