CVE-2019-19980

CVE-2019-19980 describes a privilege bypass vulnerability in the WordPress Email Subscribers & Newsletters plugin, affecting versions prior to 4.2.3. This flaw allows authenticated users, even those with subscriber-level access, to send test emails from the administrative dashboard, impersonating an administrator. Rated as Medium severity (CVSS 4.3), the vulnerability has a low attack complexity and requires user authentication, with a potential impact of low integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.