Critical · 9.3 CVE-2026-57739 EUVD-2026-43384GHSA-6x2x-7j2v-5j8c

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Vendor: AcyMailing Newsletter Team Product: AcyMailing SMTP Newsletter

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.

Affected products

Vendor	Product	Affected	Fixed
AcyMailing Newsletter Team	AcyMailing SMTP Newsletter	≤ 10.11.0	—

References

https://patchstack.com/database/Wordpress/Plugin/acymailing/vulnerability/wordpress-acymailing-smtp-newsletter-plugin-10-10-2-sql-injection-vulnerability?_s_id=cve vdb-entry