acyba vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20266

Newest CVEs

• CVE-2026-102562

  AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter

  acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

  High7.2
• CVE-2026-77807

  AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter

  acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

  High7.5
• CVE-2026-15426

  AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update

  acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

  High8.8
• CVE-2026-12170

  AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute

  acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

  Medium6.4
• CVE-2026-5200

  AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router'

  acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

  High8.8
• CVE-2026-3614

  AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

  acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

  High8.8
• CVE-2024-7384

  AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function

  acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

  High7.5