Skip to contentIcegram Email Subscribers & Newsletters vulnerabilities
- icegram email subscribers & newslettersEmail Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token VerificationCVE-2026-835555.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressEmail Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name FieldCVE-2026-127576.5 Medium
- icegram email subscribers & newslettersWordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-812907.1 High
- icegram email subscribers & newsletters by icegram express – email marketing, post notifications & woocommerce marekting automation for wordpressEmail Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX ActionCVE-2026-115924.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressEmail Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' ParameterCVE-2026-16516.5 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressEmail Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task ExecutionCVE-2025-123485.3 Medium
- icegram email subscribers & newslettersWordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerabilityCVE-2025-660557.2 High
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressEmail Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue TriggerCVE-2025-123495.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreEmail Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode ExecutionCVE-2024-82545.4 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreEmail Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Expos…CVE-2024-87714.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing AuthorizationCVE-2024-57034.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreEmail Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribeCVE-2024-61729.8 Critical
- icegram email subscribers & newsletters, email subscribers \& newsletters +1 moreWordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerabilityCVE-2024-372529.3 Critical
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +2 moreIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optinCVE-2024-57569.8 Critical
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress +1 moreIcegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]CVE-2024-48458.8 High
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreEmail Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hashCVE-2024-4295Public exploitEPSS 10.2%9.8 Critical
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressEmail Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing AuthorizationCVE-2024-36264.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreEmail Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_requestCVE-2024-40108.8 High
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL InjectionCVE-2024-2876Public exploitEPSS 80.6%9.8 Critical
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressIcegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV importCVE-2024-26564.4 Medium
- icegram email subscribers & newslettersWordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-223007.1 High
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress +1 moreIcegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File ReadCVE-2023-54149.1 Critical
- icegram email subscribers & newsletters, email subscribers \& newsletters +1 moreEmail Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injectionCVE-2022-0439Public exploit8.8 High
- icegram email subscribers & newsletters, email subscribers \& newsletters project subscribers \& newsletters +1 moreCross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0...CVE-2018-06026.1 Medium