Known vulnerabilities in the Acymailing plugin
13 security advisories have been published for the Acymailing plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Acymailing - Security Vulnerability (CVE-2026-95588) HIGH
- Acymailing - Security Vulnerability (CVE-2026-94389) CRITICAL
- AcyMailing - Path Traversal (CVE-2026-77807) HIGH
- Acymailing - Broken Access Control (CVE-2026-15426) HIGH
- Acymailing - SQL Injection (CVE-2026-57739) CRITICAL
- Acymailing - Cross-Site Scripting (XSS) (CVE-2026-57741) HIGH
- Acymailing - Broken Access Control (CVE-2026-57740) HIGH
- Acymailing - Cross-Site Scripting (XSS) (CVE-2026-12170) MEDIUM
- AcyMailing - Broken Access Control (CVE-2026-5200) HIGH
- Acymailing - Privilege Escalation (CVE-2026-3614) HIGH
- Acymailing - Cross-Site Scripting (XSS) (CVE-2025-24617) HIGH
- Acymailing - Remote Code Execution (CVE-2024-7384) HIGH
- Acymailing - Cross-Site Scripting (XSS) (CVE-2023-41867) HIGH