AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress has 15 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 15 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 8 high. 2026 was the busiest year with 11 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (33%). Other recurring categories include Missing Authorization, SQL Injection.
Every one of the 15 issues recorded for AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress has a vendor fix available, so running the current release closes all known holes.
13 independent researchers contributed these findings, most of them (2) reported by Asim Alshaya. AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-15426AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update
Read the full analysisVulnerability Records

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
Author
AcyMailing Newsletter Team
💌 UNLEASH THE POWER OF EMAIL MARKETING AUTOMATION: Effortlessly create attention-grabbing newsletters with our intuitive drag-and-drop editor – no HTML skills required. Automate your newsletter formation process using pre-saved zones. Seamlessly include your WordPress articles in your newsletters. Personalize your newsletters with user data such as name, email, or custom fields. Implement social media share options for Twitter, Facebook, and LinkedIn to expand your reach. Experience mobile-responsive default templates with previews for desktop and mobile versions. 📊 TAKE YOUR EMAIL MARKETING TO THE NEXT LEVEL: Conduct automated mass actions on users, including sending birthday newsletters, welcome greetings, and more. Plan follow-up newsletter sequences based on user interaction to nurture and engage your audience. Effortlessly schedule your newsletters for timely delivery. Automatically send timely reminders to recover abandoned WooCommerce shopping carts. Create and duplicate marketing automation workflows with ease. Handle bounce emails efficiently for improved deliverability. 📥 ENHANCE DELIVERABILITY AND ENSURE GDPR COMPLIANCE: Effectively dispatch emails in real-time using our queue system. Follow recommendations from our analysis tool to optimize your deliverability. Track reliable statistics to gain insights into your newsletter performance. 👤 EFFICIENT CONTACT LIST MANAGEMENT WITH GDPR COMPLIANCE: Effortlessly manage your subscribers with AcyMailing. Import users seamlessly from any platform or source. Utilize efficient filter options to target specific user segments. Automatically subscribe users during registration for streamlined list management. Handle false email addresses and integrate strong captchas for enhanced data security. ⤵️ EXPLORING MORE WITH ACYMAILING: Enjoy various integrations available: Business Directory, Contact Form 7, Easy Digital Downloads, Gravity Forms, Zapier, Make.com, WooCommerce, The Events Calendar, etc… Experience the power of AcyMailing with our demo site. Leverage diverse external sending services – AcyMailing Sending Service, Brevo/Sendinblue, Mailgun, SendGrid, Amazon SES, SMTP and more. 🔎Stay tuned to know every update on our plugins. Follow us on LinkedIn, Twitter, Facebook, or our website.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C