CVE-2026-14920 | AcyMailing Plugin up to 10.11.0 sql injection

August 2, 2026 Yanac

A vulnerability marked as critical has been reported in AcyMailing Plugin up to 10.11.0. The affected element is an unknown function. Performing a manipulation results in sql injection.

This vulnerability is reported as CVE-2026-14920. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More