Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-120470 EUVD-2026-124606GHSA-7g27-fhv8-j576

Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by Joomla

Description

Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and campaigns sent to a restricted audience.

Affected products

VendorProductAffectedFixed
Datasolution AcyMailing extension for Joomla and WordPress 1.0.0-11.1.1 —

References