CVE-2026-3614

The CVE-2026-3614 entry concerns the AcyMailing plugin for WordPress, affected versions 9.11.0 through 10.8.1. The root cause is a missing capability check on the wp_ajax_acymailing_router AJAX handler, enabling privilege escalation from Subscriber-level (and above) to admin-level controllers, in...