GHSA-hpx9-mrvx-g6r5Medium

Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in...

Published
November 12, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (1)

📋 Description

Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can retrieve every mailing list of the site, including lists that are not publicly visible and lists restricted to an access level, together with their descriptions, access levels, owning user account and subscriber counts. The WordPress plugin is not affected.

🔗 References (3)