CVE-2023-39974: Acymailing

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.

Affected products

• Acymailing Acymailing: from 6.7.0, before 8.7.0 (fixed in 8.7.0)

Published 2023-08-17. Last modified 2026-06-17.