CVE-2019-19984

CVE-2019-19984 describes a privilege escalation vulnerability in the WordPress plugin, Email Subscribers & Newsletters, affecting versions prior to 4.2.3. This flaw allowed authenticated users with 'edit_post' capabilities to improperly manage plugin settings and email campaigns, bypassing intended access controls. Rated 6.3 MEDIUM, the vulnerability has a low attack complexity and requires low privileges, potentially leading to limited impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.