Acyba Acymailing vulnerabilities

• acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter CVE-2026-102562 7.2 HighOctober 13, 2026
• acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter CVE-2026-77807 7.5 HighSeptember 10, 2026
• acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update CVE-2026-15426 8.8 HighAugust 11, 2026
• acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute CVE-2026-12170 6.4 MediumJuly 9, 2026
• acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' CVE-2026-5200 8.8 HighMay 20, 2026
• acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2026-3614 8.8 HighApril 16, 2026
• acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress, acymailing +1 more AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function CVE-2024-7384 7.5 HighAugust 22, 2024
• acymailing.com acymailing component for joomla, acyba acymailing starter +1 more Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0 CVE-2023-39970 9.8 CriticalAugust 17, 2023
• acyba acymailing Acyba AcyMailing before 6.9.2 mishandles file uploads by admins. CVE-2020-10934 7.2 HighMarch 24, 2020
• acyba acymailing SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a... CVE-2015-7338 7.2 HighMarch 9, 2020
• acyba acymailing CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in... CVE-2018-9107 Public exploit 8.8 HighMarch 28, 2018