Skip to content
Noroxi

icegram records

49 published records for vendor icegram.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 2%
Pre-auth RCE
1
With a fix record
38.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

49 records
  • CVE-2019-20361
    65This week

    There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the data

    CriticalCVSS 9.8WeaponizedEPSS 85%

    icegram · email subscribers \& newslettersJan 8, 2020

  • CVE-2019-19985
    42Plan

    The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user informat

    MediumCVSS 5.3Proof of conceptEPSS 71%

    icegram · email subscribers \& newslettersDec 25, 2019

  • CVE-2024-4295
    42Plan

    Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    icegram · email subscribers \& newslettersJun 5, 2024

  • CVE-2019-13569
    40Plan

    A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress.

    CriticalCVSS 9.8No exploitEPSS 3%

    icegram · email subscribers \& newslettersJul 19, 2019

  • CVE-2024-6172
    39Monitor

    Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubs

    CriticalCVSS 9.8No exploitEPSS 1%

    icegram · email subscribers \& newslettersJul 2, 2024

  • CVE-2024-5756
    39Monitor

    Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin

    CriticalCVSS 9.8No exploitEPSS 0%

    icegram · icegram expressJun 21, 2024

  • CVE-2022-45810
    39Monitor

    WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    icegram · icegram expressNov 7, 2023

  • CVE-2024-31352
    39Monitor

    WordPress Icegram Express plugin <= 5.7.13 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    icegram · email subscribers \& newslettersJun 9, 2024

  • CVE-2024-37252
    37Monitor

    WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    icegram · email subscribers & newslettersJun 26, 2024

  • CVE-2022-0439
    36Monitor

    Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection

    HighCVSS 8.8Proof of conceptEPSS 4%

    icegram · email subscribers \& newslettersMar 7, 2022

  • CVE-2022-3981
    35Monitor

    Icegram Express < 5.5.1 - Subscriber+ SQLi

    HighCVSS 8.8No exploitEPSS 0%

    icegram · email subscribers \& newslettersDec 12, 2022

  • CVE-2024-4845
    35Monitor

    Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]

    HighCVSS 8.8No exploitEPSS 0%

    icegram · icegram expressJun 12, 2024

  • CVE-2024-4010
    35Monitor

    Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request

    HighCVSS 8.8No exploitEPSS 0%

    icegram · email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressMay 15, 2024

  • CVE-2023-52119
    35Monitor

    WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    icegram · icegram engageJan 5, 2024

  • CVE-2018-6015
    31Monitor

    An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress.

    HighCVSS 7.5No exploitEPSS 3%

    icegram · email subscribers \& newslettersJan 26, 2018

  • CVE-2023-5414
    28Monitor

    Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read

    HighCVSS 7.2No exploitEPSS 1%

    icegram · icegram expressOct 20, 2023

  • CVE-2020-5767
    26Monitor

    Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged em

    MediumCVSS 6.5No exploitEPSS 0%

    icegram · email subscribers \& newslettersJul 17, 2020

  • CVE-2024-12311
    26Monitor

    Email Subscribers < 5.7.44 - Admin+ SQL Injection

    MediumCVSS 6.5No exploitEPSS 0%

    icegram · email subscribers \& newslettersJan 6, 2025

  • CVE-2016-10962
    26Monitor

    The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.

    MediumCVSS 6.5No exploitEPSS 0%

    icegram · icegram engageSep 16, 2019

  • CVE-2019-19984
    25Monitor

    The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plug

    MediumCVSS 6.3No exploitEPSS 0%

    icegram · email subscribers \& newslettersDec 25, 2019

  • CVE-2024-8254
    25Monitor

    Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Sh

    MediumCVSS 6.3No exploitEPSS 0%

    icegram · email subscribers \& newslettersOct 2, 2024

  • CVE-2019-14364
    24Monitor

    An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript c

    MediumCVSS 6.1No exploitEPSS 1%

    icegram · email subscribers \& newslettersJul 28, 2019

  • CVE-2016-10963
    24Monitor

    The icegram plugin before 1.9.19 for WordPress has XSS.

    MediumCVSS 6.1No exploitEPSS 0%

    icegram · icegram engageSep 16, 2019

  • CVE-2021-24941
    24Monitor

    Icegram < 2.0.5 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    icegram · icegramDec 21, 2021

  • CVE-2023-2398
    24Monitor

    Icegram Engage < 3.1.12 - Reflected XSS

    MediumCVSS 6.1No exploitEPSS 0%

    icegram · icegram engageJun 12, 2023