Lucene search
+L

23 matches found

NVD
NVD
•added 2026/10/01 3:17 p.m.•9 views

CVE-2026-95588

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter = 11.0.5 versions...

8.6CVSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/01 2:33 p.m.•9 views

CVE-2026-95588 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter = 11.0.5 versions...

8.6CVSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 2:33 p.m.•6 views

CVE-2026-95588

The AcyMailing SMTP Newsletter WordPress plugin, affecting versions

8.6CVSS5.8AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/01 2:33 p.m.•3 views

CVE-2026-95588 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter = 11.0.5 versions...

8.6CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/30 1:17 p.m.•7 views

CVE-2026-94389

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

9CVSS0.00634EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 12:27 p.m.•32 views

CVE-2026-94389 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

9CVSS0.00634EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 12:27 p.m.•5 views

EUVD-2026-89844

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

9CVSS5.9AI score0.00634EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 12:27 p.m.•12 views

CVE-2026-94389

The AcyMailing SMTP Newsletter plugin for WordPress, versions

9CVSS5.9AI score0.00634EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 12:27 p.m.•6 views

CVE-2026-94389 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

9CVSS5.9AI score0.00634EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2026/08/22 12:00 a.m.•18 views

VulnCheck KEV: CVE-2026-57739

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through = 10.11.0...

9.3CVSS5.8AI score0.004EPSS
SaveIn wildExploits0References2
Cvelist
Cvelist
•added 2026/08/13 1:36 p.m.•41 views

CVE-2026-28182 WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/13 1:36 p.m.•41 views

CVE-2026-28181

CVE-2026-28181 concerns the WordPress AcyMailing SMTP Newsletter plugin, affected in versions up to 10.11.1. The issue is described as a Broken Access Control vulnerability, enabling unauthorized access to certain resources due to insufficient access restrictions. Based on the provided metrics, t...

6.5CVSS5.2AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/13 1:36 p.m.•38 views

CVE-2026-28181 WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...

6.5CVSS0.0034EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/13 11:14 a.m.•15 views

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin AcyMailing SMTP Newsletter versions = 10.11.1...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•2 views

CVE-2026-28181: Missing Authorization

Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...

6.5CVSS5.7AI score0.0034EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•1 views

CVE-2026-28182: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/13 10:16 a.m.•15 views

CVE-2026-57741

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through = 10.11.0...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•3 views

CVE-2026-57740: Missing Authorization

Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through = 10.11.1...

7.1CVSS5.9AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•3 views

CVE-2026-57739: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through = 10.11.0...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•1 views

CVE-2026-57741: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through = 10.11.0...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rows per page
Query Builder