Skip to content
Acyba vulnerabilities
Newest
-
acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress
AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter
CVE-2026-102562
7.2 High
-
acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter
CVE-2026-77807
7.5 High
-
acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress
AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update
CVE-2026-15426
8.8 High
-
acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress
AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute
CVE-2026-12170
6.4 Medium
-
acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress
AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router'
CVE-2026-5200
8.8 High
-
acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress
AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
CVE-2026-3614
8.8 High
-
acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress, acymailing +1 more
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
CVE-2024-7384
7.5 High
-
acymailing.com acymailing component for joomla, acyba acymailing starter +1 more
Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0
CVE-2023-39970
9.8 Critical
-
acyba acymailing
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.
CVE-2020-10934
7.2 High
-
acyba acymailing
SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a...
CVE-2015-7338
7.2 High
-
acyba acymailing
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...
CVE-2018-9107
Public exploit
8.8 High
-
acyba acysms
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...
CVE-2018-9106
Public exploit
8.8 High