CVE-2026-28182 — WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-28182

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.

Vendor / product	Versions
AcyMailing Newsletter Team / AcyMailing SMTP Newsletter	affected n/a through 10.11.1

CWE-79

CISA-ADP

No English description supplied.

No references supplied.