CVE-2026-28182 — WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
Published: 2026-08-13 · CVSS: 6.5 · CVSS 3.1
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7