Skip to content

Icegram vulnerabilities

Products

Newest

icegram collectWordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-250245.9 MediumApril 7, 2023
unknown icegram express, icegram email subscribers \& newsletters +1 moreIcegram Express < 5.5.1 - Subscriber+ SQLiCVE-2022-39818.8 HighDecember 12, 2022
icegram popups\, welcome bar\, optins and lead generation plugin, unknown popups, welcome bar, optins and lead generation plugin – icegram +1 moreIcegram < 2.1.8 - Contributor+ Stored Cross-Site ScriptingCVE-2022-17765.4 MediumJune 27, 2022
icegram email subscribers & newsletters, email subscribers \& newsletters +1 moreEmail Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injectionCVE-2022-0439Public exploit8.8 HighMarch 7, 2022
icegram, unknown popups, welcome bar, optins and lead generation plugin – icegram +1 moreIcegram < 2.0.5 - Reflected Cross-Site ScriptingCVE-2021-249416.1 MediumDecember 21, 2021
icegram popups, welcome bar, optins and lead generation plugin – icegram, engage +1 moreWordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-368324.8 MediumOctober 19, 2021
icegram email subscribers \& newslettersMissing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin...CVE-2020-57805.3 MediumSeptember 10, 2020
icegram email subscribers \& newslettersCross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8...CVE-2020-57676.5 MediumJuly 17, 2020
icegram email subscribers \& newslettersImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram...CVE-2020-57684.9 MediumJuly 17, 2020
icegram email subscribers \& newslettersThere was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that...CVE-2019-20361Public exploitEPSS 85.1%8.3 HighJanuary 8, 2020
icegram email subscribers \& newslettersThe WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw...CVE-2019-199804.3 MediumDecember 26, 2019
icegram email subscribers \& newslettersThe WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for...CVE-2019-199815.4 MediumDecember 26, 2019
icegram email subscribers \& newslettersThe WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for...CVE-2019-199826.5 MediumDecember 26, 2019
icegram email subscribers \& newslettersThe WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users...CVE-2019-199846.3 MediumDecember 26, 2019
icegram email subscribers \& newslettersThe WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed...CVE-2019-19985Public exploitEPSS 71.4%5.8 MediumDecember 26, 2019
icegram engageThe icegram plugin before 1.9.19 for WordPress has XSS.CVE-2016-109636.1 MediumSeptember 16, 2019
icegram engageThe icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name...CVE-2016-109626.5 MediumSeptember 16, 2019
icegram engageThe icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.CVE-2019-158305.4 MediumAugust 30, 2019
icegram email subscribers \& newslettersAn XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows...CVE-2019-143646.1 MediumJuly 28, 2019
icegram email subscribers \& newslettersA SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin...CVE-2019-135699.8 CriticalJuly 19, 2019
icegram email subscribers & newsletters, email subscribers \& newsletters project subscribers \& newsletters +1 moreCross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0...CVE-2018-06026.1 MediumJune 26, 2018
icegram email subscribers \& newslettersAn issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for...CVE-2018-60157.5 HighJanuary 26, 2018