CoreCVE
Back

CRITICAL

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability

Published Jul 13, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published Jul 13, 2026
Updated Jul 13, 2026
Reserved Jun 25, 2026
Link CVE-2026-57739
CISA Vulnrichment
Updated Jul 13, 2026
NVD
Status Deferred
Modified Jul 13, 2026
Link CVE-2026-57739
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-57739