WordPress Email Subscribers by Icegram Express plugin <= 5.7.19 - Missing Authorization in handle_ajax_request vulnerability

Missing Authorization in handleajaxrequest vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Email Subscribers & Newsletters versions = 5.7.19...

CVE-2024-4010: Missing Authorization

The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handleajaxrequest function in all versions up to, and including, 5.7.19. This makes it possible for...

WordPress plugin Email Subscribers by Icegram Express has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the WordPress plugin...