CVE-2020-5780 — Missing Authentication for Critical Function in Email Subscribers Newsletters

CWE-306 — Missing Authentication for Critical Function3 documents3 sources

Severity

5.3MEDIUMNVD

EPSS

0.4%

top 37.40%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Icegram Email Subscribers Newsletters

Timeline

PublishedSep 10

Latest updateMay 24

Description

Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDicegram/email_subscribers_newsletters< 4.5.6

🔴Vulnerability Details

GHSA

GHSA-j25r-mrm6-h8pw: Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4↗2022-05-24

▶

CVEList

CVE-2020-5780: Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4↗2020-09-10

▶