Skip to contentIcegram Express vulnerabilities
- icegram express, unknown icegram express +1 moreEmail Subscribers < 5.7.50 - Admin+ Stored XSS in TemplateCVE-2025-06716.1 Medium
- icegram express, unknown icegram express formerly known as email subscribers +1 moreEmail Subscribers < 5.7.52 - Admin+ Stored XSSCVE-2024-119243.5 Low
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +2 moreIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optinCVE-2024-57569.8 Critical
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress +1 moreIcegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]CVE-2024-48458.8 High
- icegram, icegram express +1 moreWordPress Icegram Engage plugin <= 3.1.21 - Broken Access Control vulnerabilityCVE-2024-217484.3 Medium
- icegram express – email marketing, newsletters and automation for wordpress & woocommerce, express +1 moreWordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV InjectionCVE-2022-458106.1 Medium
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress +1 moreIcegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File ReadCVE-2023-54149.1 Critical