Datasolution vulnerabilities
We track 7 vulnerabilities in Datasolution products across 5 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest Datasolution vulnerabilities
- 7.1 High severity
AcyMailing extension for Joomla and WordPress: Authorization Bypass Through User-Controlled Key
Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1 - An authenticated user of any privilege level can subscribe or unsubscribe any other subscriber to or from any mailing list of
- 8.8 High severity
AcyMailing extension for Joomla and WordPress: Missing Authorization
Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker who knows a subscriber's email address can unsubscribe that subscriber from one mailing list or from every
- 8.8 High severity
AcyMailing extension for Joomla and WordPress: Exposure of Sensitive Information to an Unauthorized Actor
Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1 - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 through 11.1.1. An unauthenticated attacker
- 7.1 High severity
AcyMailing SMTP Newsletter: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through 11.1.0.
- 8.1 High severity
AcyMailing Enterprise extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could emai
- 8.1 High severity
AcyMailing extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including fil
- 7.5 High severity
acymailing.com AcyMailing extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.