CVE-2026-57739: fallo crítico en AcyMailing SMTP Newsletter
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability
Publicada el
50Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Actcvss 9.3epss 0.4%
de la publicación al arma
Publicada en NVD13 jul
VulnCheck+40d
probabilidad de explotación
0.4%top 67% de las CVE
explotación observada
síVulnCheck
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Productos afectados
AcyMailing Newsletter Team · AcyMailing SMTP NewsletterCVEs relacionadas — AcyMailing SMTP Newsletter
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-94389CRITICALWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2026-95588HIGHWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerabilityEPSS 0.3%CVE-2026-28181MEDIUMWordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57740HIGHWordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-24617HIGHWordPress AcyMailing Plugin < 9.11.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57741HIGHWordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%