Security Advisory
CVE-2019-19984
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plugin settings and email campaigns.