Acymailing

11 CVEs across 4 Acymailing products. Browse Acymailing vulnerabilities, severities, and proof-of-concept exploits.

Acymailing products with known CVEs

ProductCVEs
Acymailing11
Newsletter Plugin For Joomla In The Enterprise Version2
Newsletter Plugin For Joomla1
Newsletter Via Smtp, Sendinblue, Sendgrid, Mailgun - Acymailing Smtp Newsletter1
Acymailing CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-56292High7.52026-07-09Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was dis…
CVE-2024-7384High7.52024-08-22The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due…
CVE-2023-41867High7.12023-09-25Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AcyMailing Newsletter Team AcyMailing plugin <= 8.6.2 versions.
CVE-2023-39974Medium5.32023-08-17Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers i…
CVE-2023-39973Medium4.32023-08-17Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.
CVE-2023-39972Medium4.32023-08-17Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
CVE-2023-39971Medium6.12023-08-17Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMaili…
CVE-2023-28733High7.22023-03-30AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when acce…
CVE-2023-28732Medium6.52023-03-30Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system…
CVE-2023-28731Critical9.82023-03-30AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to un…
CVE-2021-24288Medium6.12021-05-17When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link contai…