Threats tagged 'ghsa-7qrc-923r-c8cr'

The Email Subscribers & Newsletters plugin for WordPress versions up to and including 5.9.27 contains an authorization bypass vulnerability. This flaw allows authenticated users with contributor-level access or higher to perform unauthorized actions such as modifying mail settings, creating audience lists, adding contacts, managing newsletters, and sending mass emails. The vulnerability arises from improper verification of user authorization within the plugin.