AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress vulnerabilities
6 known vulnerabilities in AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress from Acyba. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
AcyMailing – An Ultimate Newsletter Plugin and…: Improper Neutralization of Input During Web Page Generation
The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versions up to, and including, 11.1.0. This is due to insufficient input sanitization and output es
- 7.5 High severity
AcyMailing – An Ultimate Newsletter Plugin and…: Improper Limitation of a Pathname to a Restricted Directory
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter. This makes it possible for una
- 8.8 High severity
AcyMailing – An Ultimate Newsletter Plugin and…: Improper Privilege Management
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.11.1. This is due to the plugin not properly verifying that a use
- 8.8 High severity
AcyMailing – An Ultimate Newsletter Plugin and…: Missing Authorization
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 10.8.2. This is due to the plugin not properly verifying that a user is
- 8.8 High severity
AcyMailing – An Ultimate Newsletter Plugin and…: Missing Authorization
The AcyMailing plugin for WordPress is vulnerable to privilege escalation in all versions From 9.11.0 up to, and including, 10.8.1 due to a missing capability check on the `wp_ajax_acymailing_router` AJAX handler. This makes it possible for authenticated attac
- 8.8 High severity
AcyMailing – An Ultimate Newsletter Plugin and…: Unrestricted Upload of File with Dangerous Type
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the acym_extractArchive function in all versions up to, and inclu