CVE-2026-28181 — WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability

CVE-2026-28181

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.

Vendor / product	Versions
AcyMailing Newsletter Team / AcyMailing SMTP Newsletter	affected n/a through 10.11.1

CWE-862

CISA-ADP

No English description supplied.

No references supplied.