Skip to content
OpenAdvisories

Vendor

AcyMailing

4 known vulnerabilities.

AcyMailing at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Newsletter Plugin for Joomla in the Enterprise version 2 Newsletter via SMTP, Sendinblue, Sendgrid, Mailgun - AcyMailing SMTP Newsletter 1 Newsletter Plugin for Joomla 1
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.2
    CVE-2023-28733

    Stored XSS affecting the AcyMailing plugin for Joomla

    AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugi…

    AcyMailing Newsletter Plugin for Joomla in the Enterprise version Web / CMS
  • Medium 6.5
    CVE-2023-28732

    Missing access control affecting the AcyMailing plugin for Joomla

    Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path traversal, when being granted access to the campaign's creation on front-office. Thi…

    AcyMailing Newsletter Plugin for Joomla Web / CMS
  • Critical 9.8
    CVE-2023-28731

    Unauthenticated RCE affecting the AcyMailing plugin for Joomla

    AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected. This issue affects AnyMailing Joomla Plugin…

    AcyMailing Newsletter Plugin for Joomla in the Enterprise version Web / CMS
  • Unscored —
    CVE-2021-24288

    AcyMailing < 7.5.0 - Unauthenticated Open Redirect

    When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.

    AcyMailing Newsletter via SMTP, Sendinblue, Sendgrid, Mailgun - AcyMailing SMTP Newsletter