AcyMailing
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Newsletter Plugin for Joomla in the Enterprise version | 2 | – | Mar 30, 2023 |
| Newsletter Plugin for Joomla | 1 | – | Mar 30, 2023 |
| Newsletter via SMTP, Sendinblue, Sendgrid, Mailgun - AcyMailing SMTP Newsletter | 1 | – | May 17, 2021 |
Exploited and recent CVEs
- CVE-2023-28733 Stored XSS affecting the AcyMailing plugin for Joomla 0.4%
- CVE-2023-28732 Missing access control affecting the AcyMailing plugin for Joomla 0.6%
- CVE-2023-28731 Unauthenticated RCE affecting the AcyMailing plugin for Joomla 1.8%
- CVE-2021-24288 AcyMailing < 7.5.0 - Unauthenticated Open Redirect 1.9%