AC
Vendor
Acymailing
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94131 | AC Acymailing Acymailing | 8.1 | Sep 26 | Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 |
| CVE-2026-94132 | AC Acymailing Acymailing | 8.1 | Sep 26 | Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 |
| CVE-2026-56292 | AC Acymailing Acymailing | 7.5 | Jul 9 | Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 |
| CVE-2024-7384 | AC Acymailing Acymailing | 8.8 | Aug 22 | AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function |
| CVE-2023-41867 | AC Acymailing Acymailing | 6.1 | Sep 25 | WordPress AcyMailing SMTP Newsletter Plugin <= 8.6.2 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-39971 | AC Acymailing Acymailing | 6.1 | Aug 17 | Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 |
| CVE-2023-39974 | AC Acymailing Acymailing | 5.3 | Aug 17 | Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 |
| CVE-2023-39972 | AC Acymailing Acymailing | 4.3 | Aug 17 | Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 |
| CVE-2023-39973 | AC Acymailing Acymailing | 4.3 | Aug 17 | Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3 |
| CVE-2023-28733 | AC Acymailing Acymailing | 6.1 | Mar 30 | AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the… |
| CVE-2023-28732 | AC Acymailing Acymailing | 7.5 | Mar 30 | Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path… |
| CVE-2023-28731 | AC Acymailing Acymailing | 9.8 | Mar 30 | AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file… |
| CVE-2021-24288 | AC Acymailing Acymailing | 6.1 | May 17 | When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized |