Medium severity4.3NVD Advisory· Published May 23, 2024· Updated Jun 17, 2026
CVE-2024-3626
CVE-2024-3626
Description
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_template_content function in all versions up to, and including, 5.7.17. This makes it possible for authenticated attackers, with subscriber access and above, to obtain the contents of private and password-protected posts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=5.7.17
- Range: <=5.7.17
Patches
Vulnerability mechanics
References
4- plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/admin/class-email-subscribers-admin.phpnvd
- plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/includes/class-email-subscribers.phpnvd
- plugins.trac.wordpress.org/changesetnvd
- www.wordfence.com/threat-intel/vulnerabilities/id/5a56e621-2508-4500-b865-4d5e4463b91anvd
News mentions
0No linked articles in our index yet.