Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Acymailing Subscriptions

Search

Switch to Advanced Search (Beta)
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-120469 2 Datasolution, Wordpress-extensions 2 Acymailing Extension For Joomla And Wordpress, Acymailing 2026-11-15 N/A
Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1 - On a default configuration, an attacker can craft a link on the affected site that redirects the visitor to an arbitrary external site, which is usable for phishing under the trusted domain.
CVE-2026-120470 2 Datasolution, Wordpress-extensions 2 Acymailing Extension For Joomla And Wordpress, Acymailing 2026-11-15 N/A
Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and campaigns sent to a restricted audience.
CVE-2026-120467 3 Acymailing, Datasolution, Wordpress-extensions 3 Acymailing, Acymailing Extension For Joomla And Wordpress, Acymailing 2026-11-15 N/A
Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1 - An authenticated user of any privilege level can subscribe or unsubscribe any other subscriber to or from any mailing list of the site.