CVE-2026-120467
Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1 - An authenticated user of any privilege level can subscribe or unsubscribe any other subscriber to or from any mailing list of the site.
| CWE | CWE-639 |
| Vendor | datasolution |
| Product | acymailing extension for joomla and wordpress |
| Published | Nov 12, 2026 |
| Last Updated | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for datasolution acymailing extension for joomla and wordpress
Be the first to know when new unknown vulnerabilities affecting datasolution acymailing extension for joomla and wordpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Datasolution / AcyMailing extension for Joomla and WordPress
1.0.0-11.1.1
Credits
Phil Taylor / mySites.guru