Skip to content
OpenAdvisories
High · 7.1 CVE-2026-120467 EUVD-2026-124610GHSA-r3wx-qjqf-657f

Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by Joomla

Description

Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1 - An authenticated user of any privilege level can subscribe or unsubscribe any other subscriber to or from any mailing list of the site.

Affected products

VendorProductAffectedFixed
Datasolution AcyMailing extension for Joomla and WordPress 1.0.0-11.1.1 —

References