Access violation vulnerability in Email posts to subscribers 6.2

The Email Posts to Subscribers plugin for WordPress, which is used to send emails to subscribers, is vulnerable to unauthorized access of data. This vulnerability affects versions up to and including 6.2. It allows unauthenticated attackers to use additional functions and export the email addresses of subscribers. This happens because there is a missing capability check on the elp_plugin_parse_request() function.

Detected in:

Email posts to subscribers open vulnerable versions: >= * <= 6.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.