Vulnerabilities

TI-2026-63645 CVE-2026-95588 · GHSA-5c39-cf48-rvg8

WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability

MEDIUM 43

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00335 Published 2026-10-01 No fix listed CWE-22

TI-2026-63409 CVE-2026-94389 · GHSA-hh4p-grc7-5x2c

WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability

MEDIUM 41

Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00448 Published 2026-09-30 No fix listed CWE-94

TI-2026-47357 CVE-2026-66689 · GHSA-mc42-vpmr-826j

WordPress Anti Spam and list cleaner – AcyChecker plugin <= 2.0.0 - Broken Access Control vulnerability

LOW 28

Unauthenticated Broken Access Control in Anti Spam and list cleaner – AcyChecker <= 2.0.0 versions.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0026 Published 2026-08-13 No fix listed CWE-862

TI-2026-22522 CVE-2026-28182 · GHSA-fp7q-r7gq-9q6g

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-13 No fix listed CWE-79

TI-2026-22521 CVE-2026-28181 · GHSA-q9rr-4vhv-p828

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability

LOW 29

Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0034 Published 2026-08-13 No fix listed CWE-862

TI-2026-46619 CVE-2026-65448 · GHSA-j7f2-xp3w-7hpv

WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner – AcyChecker <= 1.8.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-27 No fix listed CWE-79

TI-2026-41565 CVE-2026-57741 · GHSA-vjpc-wj5x-ww3j

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79

TI-2026-41563 CVE-2026-57739 · GHSA-6x2x-7j2v-5j8c

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMail…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-07-13 No fix listed CWE-89

TI-2026-41564 CVE-2026-57740 · GHSA-pv5g-pfq4-mqxr

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newslette…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00321 Published 2026-07-13 No fix listed CWE-862

TI-2025-18334 CVE-2025-24617 · GHSA-vcg5-2qf3-89wc

WordPress AcyMailing Plugin < 9.11.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SM…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00255 Published 2025-02-14 No fix listed CWE-79

Vulnerabilities

Filters