CVE-2026-120466
Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker who knows a subscriber's email address can unsubscribe that subscriber from one mailing list or from every mailing lists, without proving that the address is theirs. The affected feature also lets an attacker determine whether a given email address belongs to a subscriber of the site.
| CWE | CWE-862 |
| Vendor | datasolution |
| Product | acymailing extension for joomla and wordpress |
| Published | Nov 12, 2026 |
| Last Updated | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for datasolution acymailing extension for joomla and wordpress
Be the first to know when new unknown vulnerabilities affecting datasolution acymailing extension for joomla and wordpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Datasolution / AcyMailing extension for Joomla and WordPress
1.0.0-11.1.1
Credits
Phil Taylor / mySites.guru K1nako / Ghent University VDP https://vdp.ugent.be