Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 07:07:10 +0000 CVE-2024-5703 — Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization https://cve.radiocsirt.org/vuln/cve-2024-5703 <p><strong>Affected:</strong> icegram Email Subscribers &amp; Newsletters – Email Marketing, Post Notifications &amp; Newsletter Plugin for WordPress</p> <p>The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress &amp; WooCommerce plugin for WordPress is vulnerable to unauthorized API access due to a missing capability check in all versions up to, and including, 5.7.26. This makes it possible for authenticated attackers, with Subscriber-level access and above, to access the API (provided it is enabled) and add, edit, and delete audience users.</p> <p><strong>Affected:</strong> icegram Email Subscribers &amp; Newsletters – Email Marketing, Post Notifications &amp; Newsletter Plugin for WordPress</p> <p>The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress &amp; WooCommerce plugin for WordPress is vulnerable to unauthorized API access due to a missing capability check in all versions up to, and including, 5.7.26. This makes it possible for authenticated attackers, with Subscriber-level access and above, to access the API (provided it is enabled) and add, edit, and delete audience users.</p> https://cve.radiocsirt.org/vuln/cve-2024-5703