CVE-2026-102562 | Acyba AcyMailing Plugin up to 11.1.0 on WordPress Subscriber Insertion acym_cleanVar customField[] cross site scripting

October 13, 2026 Yanac

A vulnerability classified as problematic was found in Acyba AcyMailing Plugin up to 11.1.0 on WordPress. This affects the function acym_cleanVar of the component Subscriber Insertion. The manipulation of the argument customField[] results in cross site scripting.

This vulnerability is known as CVE-2026-102562. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More