AcyMailing SMTP Newsletter vulnerabilities
5 known CVE vulnerabilities in AcyMailing SMTP Newsletter, translated and rated.
- CVE-2026-57739Critical
The AcyMailing SMTP Newsletter plugin for WordPress contains a Blind SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. The issue affects versions up to and including 10.11.0.
- CVE-2026-28182Medium
Cross Site Scripting (XSS) vulnerability in AcyMailing SMTP Newsletter versions up to 10.11.1, exploitable by a user with Subscriber role.
- CVE-2026-28181Medium
Broken Access Control vulnerability in AcyMailing SMTP Newsletter up to version 10.11.1 allows a subscriber to gain unauthorized access to administrative functions.
- CVE-2026-57741High
The AcyMailing SMTP Newsletter plugin for WordPress contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This issue affects all versions up to and including 10.11.0.
- CVE-2026-57740High
The AcyMailing SMTP Newsletter plugin for WordPress contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 10.11.1.