acyba vulnerabilities
7 published CVEs name acyba among the affected products.
- 7Published CVEs7 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102562
AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter
acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
High7.2 - CVE-2026-77807
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter
acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
High7.5 - CVE-2026-15426
AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update
acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
High8.8 - CVE-2026-12170
AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute
acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
Medium6.4 - CVE-2026-5200
AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router'
acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
High8.8 - CVE-2026-3614
AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
High8.8 - CVE-2024-7384
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
acyba · AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
High7.5