Threats tagged 'ghsa-5vrp-w4h7-w6rh'

The Icegram Express plugin for WordPress versions up to and including 5.9.10 contains an authorization vulnerability in the trigger_mailing_queue_sending function. This flaw allows unauthenticated attackers to bypass normal scheduling controls and force immediate email sending. Exploitation can lead to increased server load and manipulation of plugin state, potentially causing denial-of-service-like effects or abuse of the email sending functionality.