Description
Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AcyMailing Newsletter Team | AcyMailing SMTP Newsletter | ≤ 11.0.5 | — |
Critical · 9.0
CVE-2026-94389
EUVD-2026-89844GHSA-hh4p-grc7-5x2c
WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack