CVE-2026-120469
Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1 - On a default configuration, an attacker can craft a link on the affected site that redirects the visitor to an arbitrary external site, which is usable for phishing under the trusted domain.
| CWE | CWE-601 |
| Vendor | datasolution |
| Product | acymailing extension for joomla and wordpress |
| Published | Nov 12, 2026 |
| Last Updated | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for datasolution acymailing extension for joomla and wordpress
Be the first to know when new unknown vulnerabilities affecting datasolution acymailing extension for joomla and wordpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Datasolution / AcyMailing extension for Joomla and WordPress
1.0.0-11.1.1
Credits
Phil Taylor / mySites.guru K1nako / Ghent University VDP https://vdp.ugent.be