CVE-2020-5767: Icegram Email Subscribers & Newsletters

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking legitimate users into clicking a crafted link.

Affected products

• Icegram Email Subscribers & Newsletters: version 4.4.8 only

Published 2020-07-17. Last modified 2026-06-17.