AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress vulnerabilities

Product

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

by acyba · last CVE Oct 13, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 5Medium 1Low 0

Severity

All severities6 Critical0 High5 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-12170	6.4	0%	Jul 9	AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute Affected: through 10.10.2