CVE-2020-5780 - Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing

Back Back to CVE browser

MEDIUM

Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing

Published Sep 10, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 1.63%

Description

Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing.

Affected products

Vendor n/a Product Icegram Email Subscribers & Newsletters Plugin for WordPress Default
n/a
- Version
  Prior to 4.5.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Icegram Email Subscribers & Newsletters Plugin for WordPress

n/a

Version	Status	Constraints
Prior to 4.5.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26937
Advisory
https://www.tenable.com/security/research/tra-2020-53
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26937		Advisory
https://www.tenable.com/security/research/tra-2020-53		x_refsource_MISCExploitThird Party Advisory