AC
Vendor
acyba
11
CVEs
0
On KEV
1
New 30D
Products
AA8.8
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
acyba
6 CVEs0 on KEV1 new
AC8.8
Acymailing
Acyba
3 CVEs0 on KEV0 new
AS9.8
Acymailing Starter
Acyba
1 CVEs0 on KEV0 new
AC8.8
Acysms
Acyba
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102562 | AA AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress acyba | 7.2 | Oct 13 | AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter |
| CVE-2026-77807 | AA AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress acyba | 7.5 | Sep 10 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter |
| CVE-2026-15426 | AA AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress acyba | 8.8 | Aug 11 | AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update |
| CVE-2026-12170 | AA AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress acyba | 6.4 | Jul 9 | AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute |
| CVE-2026-5200 | AA AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress acyba | 8.8 | May 20 | AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' |
| CVE-2026-3614 | AA AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress acyba | 8.8 | Apr 16 | AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation |
| CVE-2023-39970 | AS Acymailing Starter Acyba | 9.8 | Aug 17 | Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla |
| CVE-2020-10934 | AC Acymailing Acyba | 7.2 | Mar 24 | Acyba AcyMailing before 6.9.2 mishandles file uploads by admins |
| CVE-2015-7338 | AC Acymailing Acyba | 7.2 | Mar 9 | SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php |
| CVE-2018-9107 | AC Acymailing Acyba | 8.8 | Mar 28 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is… |
| CVE-2018-9106 | AC Acysms Acyba | 8.8 | Mar 28 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled… |