Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing.
https://www.tenable.com/security/research/tra-2020-53
https://www.tenable.com/security/research/tra-2020-53
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5780