Acymailing.Com vulnerabilities
8 vulnerabilities
Known vulnerabilities in Acymailing.Com products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Acymailing Enterprise Component For Joomla4 vulnerabilities
- Acymailing Component For Joomla1 vulnerabilities
- Acymailing Enterprise Extension For Joomla1 vulnerabilities
- Acymailing Extension For Joomla1 vulnerabilities
- Acymailing.Com Acymailing Extension For Joomla1 vulnerabilities
CVE-2026-56292acymailingacymailing+1
EPSS score1.38%
Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.CVE-2026-94132acymailingacymailing+1EPSS score0.47%
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.CVE-2026-94131acymailingacymailing+1EPSS score0.26%
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as configuration.php.CVE-2023-39973acymailingacymailing+1EPSS score0.40%
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.CVE-2023-39974acymailingacymailing+1EPSS score0.51%
Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.CVE-2023-39971acymailingacymailing+1EPSS score0.40%
Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3.CVE-2023-39970acybaacymailing_starter+1EPSS score1.05%
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.CVE-2023-39972acymailingacymailing+1EPSS score0.40%
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.