CVE-2026-120471
Joomla Extension - acymailing.com - Site modules rendered outside their access level in AcyMailing 1.0.0 - 11.1.1
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - acymailing.com - Site modules rendered outside their access level in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated visitor can cause a site module to be rendered regardless of the Joomla access level that module is restricted to, which discloses content reserved for a higher view level. The WordPress plugin is not affected.
| CWE | CWE-862 |
| Vendor | datasolution |
| Product | acymailing extension for joomla |
| Published | Nov 12, 2026 |
| Last Updated | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for datasolution acymailing extension for joomla
Be the first to know when new unknown vulnerabilities affecting datasolution acymailing extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Datasolution / AcyMailing extension for Joomla
1.0.0-11.1.1
Credits
Phil Taylor / mySites.guru