CVE-2020-5780: Icegram Email Subscribers & Newsletters

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing.

Affected products

• Icegram Email Subscribers & Newsletters: before 4.5.6 (fixed in 4.5.6)

Published 2020-09-10. Last modified 2026-06-17.