PT-2025-29725 · Yaysmtp · Yaysmtp

Lê Quốc Bảo · Published 2025-07-16 · Updated 2025-07-21 · CVE-2025-48161

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions YaySMTP versions n/a through 1.3

Description YaySMTP is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This issue could allow for unauthorized database access or modification.

Recommendations Versions prior to 1.4 are affected.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-48161

Affected Products

Yaysmtp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-48161 · Security Note
• https://t.me/cvenotify/129138 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/smtp-sendinblue/vulnerability/wordpress-yaysmtp-plugin-1-3-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/cracbot/status/1947250258427379805 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/smtp-sendinblue/vulnerability/wordpress-yaysmtp-plugin-1-3-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1945435425738477700 · Twitter Post