CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120467
UNKNOWNCVSS 0NVD feed
Published 12 November 2026 · tracked since 13 November 2026
Description
Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1 - An authenticated user of any privilege level can subscribe or unsubscribe any other subscriber to or from any mailing list of the site.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-107152 HIGH 7.1
- CVE-2024-36344
- CVE-2026-126838 MEDIUM 5.5
- CVE-2026-121619
- CVE-2026-117544
- CVE-2026-117542
- CVE-2026-0436
- CVE-2026-81843 MEDIUM 6.5
- CVE-2026-127204 HIGH 7.5
- CVE-2026-126199 MEDIUM 6.8