AC
Product
Acymailing
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 7Low 0
Watch
Add Acymailing to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28731 | 9.8 | Mar 30 | AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file… Affected: before 8.3.0 |
| CVE-2024-7384 | 8.8 | Aug 22 | AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function Affected: before 9.8.0 |
| CVE-2026-94131 | 8.1 | Sep 26 | Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 Affected: before 11.1.0 |
| CVE-2026-94132 | 8.1 | Sep 26 | Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 Affected: before 11.1.0 |
| CVE-2026-56292 | 7.5 | Jul 9 | Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 Affected: 6.0.0 before 10.11.1 |
| CVE-2023-28732 | 7.5 | Mar 30 | Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path… Affected: before 8.3.0 |
| CVE-2023-41867 | 6.1 | Sep 25 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AcyMailing Newsletter Team AcyMailing plugin <= 8.6.2 versions Affected: before 8.6.3 |
| CVE-2023-39971 | 6.1 | Aug 17 | Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS Affected: 6.7.0 before 8.7.0 |
| CVE-2023-28733 | 6.1 | Mar 30 | AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the… Affected: before 8.3.0 |
| CVE-2021-24288 | 6.1 | May 17 | When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized Affected: before 7.5.0 |
| CVE-2023-39974 | 5.3 | Aug 17 | Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla Affected: 6.7.0 before 8.7.0 |
| CVE-2023-39973 | 4.3 | Aug 17 | Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla Affected: 6.7.0 before 8.7.0 |
| CVE-2023-39972 | 4.3 | Aug 17 | Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla Affected: 6.7.0 before 8.7.0 |
Showing 13