Access violation vulnerability in Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce 5.7.34

The Email Subscribers by Icegram Express plugin for WordPress, which helps with email marketing, newsletters, and automation, has a security flaw that could allow unauthorized access to data. This is because it doesn’t properly check for permissions when using the ‘preview_email_template_design’ function in versions up to 5.7.34. This means that attackers who have Subscriber-level access or higher could potentially access private, password protected, pending, and draft posts and pages.