What’s Vulnerable › Vulnerabilities

CVE-2020-5780

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-10 · updated 2026-06-17
• Weakness: CWE-306

Description

Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing.

Affected products

• icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress: before 4.5.6 — fixed in 4.5.6

How to fix

Upgrade to a fixed version: icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress 4.5.6. Check the vendor advisory for mitigations.

References

• https://www.tenable.com/security/research/tra-2020-53
• https://www.tenable.com/security/research/tra-2020-53

Get alerted when CVE-2020-5780 or the next vulnerability affects your stack