Open Redirect in Datasolution Acymailing Extension For Joomla And WordPress

CVE-2026-120469

Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1 - On a default configuration, an attacker can craft a link on the affected site that redirects the visitor to an arbitrary external site, which is usable for phishing under the trusted domain.

Vulnerability class: Open Redirect

Published · last modified .

EPSS exploit prediction

FIRST.org has not scored this CVE yet. About EPSS.

Affected products

Weakness classification (CWE)

References