CVE-2025-0916 | yaycommerce YaySMTP and Email Logs Plugin up to 2.6.2 on WordPress Any SMTP Service wp_kses_post cross site scripting

A vulnerability was found in yaycommerce YaySMTP and Email Logs Plugin up to 2.6.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function wp_kses_post of the component Any SMTP Service. The manipulation leads to cross site scripting.

This vulnerability is known as CVE-2025-0916. The attack can be launched remotely. There is no exploit available.