AC
Product
Acymailing
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 7Low 0
Watch
Add Acymailing to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7384 | 8.8 | Aug 22 | AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function Affected: before 9.8.0 |
| CVE-2026-94131 | 8.1 | Sep 26 | Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 Affected: before 11.1.0 |
| CVE-2026-94132 | 8.1 | Sep 26 | Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 Affected: before 11.1.0 |
| CVE-2026-56292 | 7.5 | Jul 9 | Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 Affected: 6.0.0 before 10.11.1 |
| CVE-2023-28732 | 7.5 | Mar 30 | Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path… Affected: before 8.3.0 |
Showing 5