Vulnerabilities > CVE-2019-19985 - Missing Authorization vulnerability in Icegram Email Subscribers & Newsletters

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
icegram
CWE-862

Summary

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.

Vulnerable Configurations

Part Description Count
Application
Icegram
124

Common Weakness Enumeration (CWE)