Authentication vulnerability in Email Subscribers & Newsletters – Powerful Email Marketing, Post Notification & Newsletter Plugin for WordPress & WooCommerce 5.9.10

The Icegram Express plugin for WordPress, which helps with email subscribers, newsletters, and marketing automation, has a security vulnerability in versions up to 5.9.10. This means that the plugin doesn’t check properly if a user is allowed to do something in the `trigger_mailing_queue_sending` function. As a result, people who are not logged in can send emails right away, skip the schedule, use up a lot of server resources, and change how the plugin works. This can lead to misuse or cause problems similar to a Denial of Service (DoS) attack.