Skip to content
Threat Feed
Subscribe

Vendor

AcyMailing

3 briefs RSS
high advisory

Stored Cross-Site Scripting in AcyMailing WordPress Plugin

An unauthenticated stored XSS vulnerability in AcyMailing WordPress plugin version 11.1.0 and earlier allows attackers to inject malicious scripts via the customField[] parameter.

AcyMailing web-application xss cms vulnerability
1t 1c
high advisory

Remote Code Execution in AcyMailing Enterprise via CVE-2026-94132

A vulnerability in AcyMailing Enterprise (CVE-2026-94132) allows unauthenticated remote code execution by sending malicious MIME attachments to a POP3-monitored mailbox.

AcyMailing Enterprise vulnerability rce joomla web-application
1r 1t 1c
high advisory

Path Traversal Vulnerability in AcyMailing WordPress Plugin

The AcyMailing WordPress plugin is vulnerable to unauthenticated directory traversal, allowing attackers to read arbitrary files on the server when the Embed images feature is enabled.

AcyMailing web-application vulnerability directory-traversal
1r 1t 1c