CVE-2026-57739: falha crítica em AcyMailing SMTP Newsletter
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability
Publicada em
50Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 9.3epss 0.4%
da publicação à arma
Publicada no NVD13 de jul.
VulnCheck+40d
probabilidade de exploração
0.4%top 67% das CVEs
exploração observada
simVulnCheck
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
AcyMailing Newsletter Team · AcyMailing SMTP NewsletterCVEs relacionadas — AcyMailing SMTP Newsletter
No mesmo produto, das mais perigosas para as menos.
CVE-2026-94389CRITICALWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2026-95588HIGHWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerabilityEPSS 0.3%CVE-2026-28181MEDIUMWordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57740HIGHWordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-24617HIGHWordPress AcyMailing Plugin < 9.11.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57741HIGHWordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%