Advisories · Technology
AcyMailing Newsletter Team AcyMailing SMTP Newsletter.
Every CVE that names AcyMailing Newsletter Team AcyMailing SMTP Newsletter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- Path traversal
- CVSS 9.0 CriticalCritical · CVSS 9+
WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- Code injection
- CVSS 6.5 Medium
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- Broken access control
- CVSS 7.1 High
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- SQL injection
- CVSS 7.1 High
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- Broken access control
- CVSS 7.1 High
WordPress AcyMailing Plugin < 9.11.1 - Reflected Cross Site Scripting (XSS) vulnerability
- AcyMailing Newsletter Team AcyMailing SMTP Newsletter
- Cross-site scripting (XSS)