Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can retrieve every mailing list of the site, including lists that are not publicly visible and lists restricted to an access level, together with their descriptions, access levels, owning user account and subscriber counts. The WordPress plugin is not affected.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Datasolution |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.acymailing.com/ |
|
History
Sun, 15 Nov 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Datasolution
Datasolution acymailing Extension For Joomla |
|
| Vendors & Products |
Datasolution
Datasolution acymailing Extension For Joomla |
Thu, 12 Nov 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can retrieve every mailing list of the site, including lists that are not publicly visible and lists restricted to an access level, together with their descriptions, access levels, owning user account and subscriber counts. The WordPress plugin is not affected. | |
| Title | Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 | |
| Weaknesses | CWE-200 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: Joomla
Published: 2026-11-12T18:00:37.079Z
Updated: 2026-11-13T04:40:16.984Z
Reserved: 2026-11-02T13:30:27.837Z
Link: CVE-2026-120468
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-12T18:17:18.170
Modified: 2026-11-12T22:19:08.767
Link: CVE-2026-120468
Redhat
No data.