CVE-2026-120468
Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can retrieve every mailing list of the site, including lists that are not publicly visible and lists restricted to an access level, together with their descriptions, access levels, owning user account and subscriber counts. The WordPress plugin is not affected.
| CWE | CWE-200 |
| Vendor | datasolution |
| Product | acymailing extension for joomla |
| Published | Nov 12, 2026 |
| Last Updated | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for datasolution acymailing extension for joomla
Be the first to know when new unknown vulnerabilities affecting datasolution acymailing extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Datasolution / AcyMailing extension for Joomla
1.0.0-11.1.1
Credits
Phil Taylor / mySites.guru