https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 12:01:53 +0000 https://cve.radiocsirt.org/vuln/cve-2024-4010 <p><strong>Affected:</strong> icegram Email Subscribers &amp; Newsletters – Email Marketing, Post Notifications &amp; Newsletter Plugin for WordPress, icegram email_subscribers_\&amp;_newsletters</p> <p>The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handle_ajax_request function in all versions up to, and including, 5.7.19. This makes it possible for authenticated attackers, with subscriber-level access and above, to cause a loss of confidentiality, integrity, and availability, by performing multiple unauthorized actions. Some of these actions could also be leveraged to conduct PHP Object Injection and SQL Injection attacks.</p> <p><strong>Affected:</strong> icegram Email Subscribers &amp; Newsletters – Email Marketing, Post Notifications &amp; Newsletter Plugin for WordPress, icegram email_subscribers_\&amp;_newsletters</p> <p>The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handle_ajax_request function in all versions up to, and including, 5.7.19. This makes it possible for authenticated attackers, with subscriber-level access and above, to cause a loss of confidentiality, integrity, and availability, by performing multiple unauthorized actions. Some of these actions could also be leveraged to conduct PHP Object Injection and SQL Injection attacks.</p> https://cve.radiocsirt.org/vuln/cve-2024-4010