Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce, CVE-2018-6015
- CVE, Research URL
- Home page URL
- Application
-
Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce
- Published on
- Jan 27, 2018
- Research Description
- An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress. Sending an HTTP POST request to a URI with /?es=export at the end, and adding option=view_all_subscribers in the body, allows downloading of a CSV data file with all subscriber data.
- Affected versions
-
Min -, max 2.9.1.
- Status
-
vulnerable