← WordPress Vulnerabilities
WordPress security by component

Anti Spam and list cleaner – AcyChecker

Anti Spam and list cleaner – AcyChecker is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 27, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: acychecker

CVE-2026-65448: AcyChecker public input permits cross-site scripting

AcyChecker through 1.8.1 accepts attacker-controlled input through an unauthenticated request path and places it into a browser-executable output context without adequate neutralization. A victim who opens the crafted output can run script in the site's origin. The Patchstack CNA record does not disclose whether the payload is reflected or stored, or identify the endpoint, action, parameter or rendering function.

PublishedJul 27, 2026
Known safe version2.0.0
Safe version
Jul 27, 2026 CVE-2026-65448
AcyChecker public input permits cross-site scripting
AcyChecker through 1.8.1 accepts attacker-controlled input through an unauthenticated request path and places it into a browser-executable output context without adequate neutralization. A victim who opens the crafted output can run script in the site's origin. The Patchstack CNA record does not disclose whether the payload is reflected or stored, or identify the endpoint, action, parameter or rendering function.
2.0.0
CVE6.5
NVDPending