acyba AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

• CVE-2026-102562 High 7.2 AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter 0.2%
• CVE-2026-77807 High 7.5 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter 0.9%
• CVE-2026-15426 High 8.8 AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update 0.7%
• CVE-2026-12170 Medium 6.4 AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute 0.3%
• CVE-2026-5200 High 8.8 AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' 0.3%
• CVE-2026-3614 High 8.8 AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation 0.4%
• CVE-2024-7384 High 7.5 AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function 1.0%