Acymailing vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AC

Product

Acymailing

by Acymailing · last CVE Sep 26, 2026

13

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 1High 5Medium 7Low 0

Severity

All severities13 Critical1 High5 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Acymailing to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-41867	6.1	0%	Sep 25	WordPress AcyMailing SMTP Newsletter Plugin <= 8.6.2 is vulnerable to Cross Site Scripting (XSS) Affected: before 8.6.3
CVE-2023-39971	6.1	0%	Aug 17	Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 Affected: 6.7.0 before 8.7.0
CVE-2023-28733	6.1	0%	Mar 30	Stored XSS affecting the AcyMailing plugin for Joomla Affected: before 8.3.0
CVE-2021-24288	6.1	2%	May 17	When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized Affected: before 7.5.0
CVE-2023-39974	5.3	1%	Aug 17	Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 Affected: 6.7.0 before 8.7.0
CVE-2023-39972	4.3	0%	Aug 17	Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 Affected: 6.7.0 before 8.7.0
CVE-2023-39973	4.3	0%	Aug 17	Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 Affected: 6.7.0 before 8.7.0