AcyMailing < 10.11.1 - Unauthenticated SQL Injection

AcyMailing component for Joomla 10.11.1 contains a sql injection caused by improper input sanitization, letting attackers access unauthorized database data, exploit requires crafted input. id: CVE-2026-56292 info: name: AcyMailing 10.11.1 - Unauthenticated SQL Injection author: str4k3r severity:...

WordPress AcyMailing <7.5.0 - Open Redirect

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user. id: CVE-2021-24288...

CVE-2026-56292-AcyMailing-SQLi

CVE-2026-56292 — AcyMailing for Joomla 未認証SQLインジェクション 著者: nullwhisper 許可されたセキュリティ研究/脆弱性検証のみを対象としています。 AcyMailing for Joomla は、公開フロントエンドタスク frontentityselect::loadEntityFront を公開します。古いバージョンでは、columns パラメータがサニタイズなしでSQLクエリに直接渡されます。パッチ適用済みバージョンでは acymsecureDBColumn を使用し、... not secured のようなエラーを返します。...

CVE-2026-95588

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter = 11.0.5 versions...

CVE-2026-95588 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter = 11.0.5 versions...

EUVD-2026-90855

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter = 11.0.5 versions...

CVE-2026-95588 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter = 11.0.5 versions...

CVE-2026-95588

The AcyMailing SMTP Newsletter WordPress plugin, affecting versions

WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Oly Hossen in WordPress Plugin AcyMailing SMTP Newsletter versions = 11.0.5...

CVE-2026-94389

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

CVE-2026-94389 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

EUVD-2026-89844

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

CVE-2026-94389

The AcyMailing SMTP Newsletter plugin for WordPress, versions

CVE-2026-94389 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

CVE-2026-94131

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as...

CVE-2026-94131

The AcyMailing Enterprise extension for Joomla (versions

CVE-2026-94131 Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as...

CVE-2026-94131 Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as...

EUVD-2026-87773

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as...