https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 10:06:02 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-77807 <p>The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires &#34;Embed images&#34; option in AcyMailing configuration being enabled.</p> <p>The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires &#34;Embed images&#34; option in AcyMailing configuration being enabled.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-77807 https://vulnerability.circl.lu/vuln/ghsa-w97p-m43x-6fh6 <p>The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires &#34;Embed images&#34; option in AcyMailing configuration being enabled.</p> <p>The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires &#34;Embed images&#34; option in AcyMailing configuration being enabled.</p> https://vulnerability.circl.lu/vuln/ghsa-w97p-m43x-6fh6