AcyMailing SMTP Newsletter
AcyMailing Newsletter Team
Developer
11.1.1
Latest version
5,000
Installations
No date
Last updated
Vulnerability history
0 present
17 patched
16 Mitigation rules
- Cross Site Scripting (XSS) vulnerability<= 11.1.007/10/2026
- Arbitrary File Deletion vulnerability<= 11.0.501/10/2026
- Remote Code Execution (RCE) vulnerability<= 11.0.530/09/2026
- WordPress AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter vulnerability<= 11.0.410/09/2026
- Broken Access Control vulnerability<= 10.11.113/08/2026
- Cross Site Scripting (XSS) vulnerability<= 10.11.113/08/2026
- Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update vulnerability<= 10.11.111/08/2026
- Unauthenticated SQL Injection vulnerability< 10.11.106/08/2026
- SQL Injection vulnerability<= 10.11.006/07/2026
- Broken Access Control vulnerability<= 10.11.106/07/2026
- Cross Site Scripting (XSS) vulnerability<= 10.11.006/07/2026
- Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability<= 10.8.221/05/2026
- WordPress AcyMailing plugin 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability9.11.0-10.8.116/04/2026
- Reflected Cross Site Scripting (XSS) vulnerability< 9.11.130/12/2024
- Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function vulnerability<= 9.7.222/08/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 8.6.205/09/2023
- Unauthenticated Open Redirect vulnerability<= 7.4.129/04/2021