Medium severityNVD Advisory· Published Nov 12, 2026· Updated Nov 12, 2026
CVE-2026-120469
CVE-2026-120469
Description
Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1 - On a default configuration, an attacker can craft a link on the affected site that redirects the visitor to an arbitrary external site, which is usable for phishing under the trusted domain.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 1.0.0 - 11.1.1
- Range: 1.0.0 - 11.1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.