Acymailing Newsletter Team vulnerabilities

11 vulnerabilities

Known vulnerabilities in Acymailing Newsletter Team products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

Products

3
7.1HighCVE-2025-24617acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing Plugin < 9.11.1 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through < 9.11.1.EPSS0.26%7.2HighCVE-2026-65448acymailing newsletter team · anti spam and list cleaner &#8211; acychecker +1 moreWordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner &#8211; AcyChecker <= 1.8.1 versions.EPSS0.22%6.3MediumCVE-2026-66689acymailing newsletter team · anti spam and list cleaner &#8211; acychecker +1 moreWordPress Anti Spam and list cleaner – AcyChecker plugin <= 2.0.0 - Broken Access Control vulnerabilityUnauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.EPSS0.26%7.1HighCVE-2026-57740acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerabilityMissing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.1.EPSS0.32%9.3CriticalCVE-2026-57739acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.EPSS0.40%7.2HighCVE-2026-57741acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.EPSS0.25%9.8CriticalCVE-2026-94389acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerabilityUnauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.EPSS0.46%9.1CriticalCVE-2026-95588acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerabilityUnauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.EPSS0.34%6.5MediumCVE-2026-28182acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerabilitySubscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.EPSS0.22%6.5MediumCVE-2026-28181acymailing newsletter team · acymailing smtp newsletter +1 moreWordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerabilitySubscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.EPSS0.34%7.1HighCVE-2023-41867acymailing newsletter team · acymailing +2 moreWordPress AcyMailing SMTP Newsletter Plugin <= 8.6.2 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AcyMailing Newsletter Team AcyMailing plugin <= 8.6.2 versions.EPSS0.38%