Vulnerability Bulletins

CVE-2026-120470

   
Affected software JOOMLA
 
Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and campaigns sent to a restricted audience.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-120470