Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

acyba — Vulnerabilities & Security Advisories 5

Browse all 5 CVE security advisories affecting acyba. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE ID Title CVSS Severity Published
CVE-2026-15426 AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update — AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress CWE-269 8.8 High 2026-08-11
CVE-2026-12170 AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute — AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress CWE-79 6.4 Medium 2026-07-09
CVE-2026-5200 AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' — AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress CWE-862 8.8 High 2026-05-20
CVE-2026-3614 AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation — AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress CWE-862 8.8 High 2026-04-16
CVE-2024-7384 AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function — AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress CWE-434 7.5 High 2024-08-22

This page lists every published CVE security advisory associated with acyba. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.