Icegram vulnerabilities
40 CVEs and advisories name Icegram as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-2876Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
- CVE-2024-2656Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
- CVE-2024-22300WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-51532WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52119WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45810WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection
- CVE-2023-5414Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
- CVE-2023-25024WordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2021-36832WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2018-0602Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary we