CVE-2026-94389 — WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
Published: 2026-09-30 · CVSS: 9.0 · CVSS 3.1
Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7