AcyMailing extension for Joomla and WordPress vulnerabilities

3 known vulnerabilities in AcyMailing extension for Joomla and WordPress from Datasolution. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  AcyMailing extension for Joomla and WordPress: Authorization Bypass Through User-Controlled Key

  CVE-2026-120467Nov 12, 2026Datasolution

  Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1 - An authenticated user of any privilege level can subscribe or unsubscribe any other subscriber to or from any mailing list of

• 8.8 High severity

  AcyMailing extension for Joomla and WordPress: Missing Authorization

  CVE-2026-120466Nov 12, 2026Datasolution

  Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker who knows a subscriber's email address can unsubscribe that subscriber from one mailing list or from every

• 8.8 High severity

  AcyMailing extension for Joomla and WordPress: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-118495Nov 12, 2026Datasolution

  Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1 - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 through 11.1.1. An unauthenticated attacker