AA
Product
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
6
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 6Medium 1Low 0
Watch
Add AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-15426 | 8.8 | Aug 11 | AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update Affected: through 10.11.1 |
| CVE-2026-5200 | 8.8 | May 20 | AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' Affected: through 10.8.2 |
| CVE-2026-3614 | 8.8 | Apr 16 | AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation Affected: 9.11.0 through 10.8.1 |
| CVE-2024-7384 | 8.8 | Aug 22 | AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function Affected: through 9.7.2 |
| CVE-2026-77807 | 7.5 | Sep 10 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter Affected: through 11.0.4 |
| CVE-2026-102562 | 7.2 | Oct 13 | AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter Affected: through 11.1.0 |
Showing 6