Skip to main content

Anti Spam And List Cleaner 8211 Acychecker

1 CVEs product

Monthly

CVE-2026-66689 Aug 13, 13:37 MEDIUM This Month

Broken Access Control in the Anti Spam and list cleaner - AcyChecker WordPress plugin (versions <= 2.0.0) allows attackers to access or invoke restricted plugin functionality without proper authorization. Reported by Patchstack and tracked as EUVD-2026-57901, the flaw stems from missing authorization checks (CWE-862) on one or more plugin endpoints or AJAX handlers. Depending on the exposed functionality - which can include email list management, spam rule configuration, or subscriber data operations - an attacker could read, modify, or degrade plugin-controlled data. No public exploit has been identified at time of analysis.

WordPress Authentication Bypass Wordpress Plugin Anti Spam And List Cleaner 8211 Acychecker Acymailing Newsletter Team
NVD
CVSS 3.1
6.3
EPSS
0.2%
EPSS 0% CVSS 6.3
MEDIUM This Month

Broken Access Control in the Anti Spam and list cleaner - AcyChecker WordPress plugin (versions <= 2.0.0) allows attackers to access or invoke restricted plugin functionality without proper authorization. Reported by Patchstack and tracked as EUVD-2026-57901, the flaw stems from missing authorization checks (CWE-862) on one or more plugin endpoints or AJAX handlers. Depending on the exposed functionality - which can include email list management, spam rule configuration, or subscriber data operations - an attacker could read, modify, or degrade plugin-controlled data. No public exploit has been identified at time of analysis.

WordPress Authentication Bypass Wordpress Plugin +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy