Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

Уязвимости

• CVE-2024-6172без авторизации≤ 5.7.25

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubs

  Критич. 9.8

• CVE-2024-5756без авторизации≤ 5.7.23

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin

  Критич. 9.8

• CVE-2024-31352без авторизации≤ 5.7.13

  WordPress Icegram Express plugin <= 5.7.13 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2024-4295без авторизации≤ 5.7.20

  Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

  Критич. 9.8

• CVE-2024-2876без авторизации≤ 5.7.14

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection

  Критич. 9.8

• CVE-2022-45810без авторизации · нужен клик≤ 5.5.2

  WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

  Критич. 9.8

• CVE-2019-13569без авторизации

  A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress.

  Критич. 9.8

• CVE-2024-37252без авторизации≤ 5.7.25

  WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2024-4845подписчик+≤ 5.7.22

  Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]

  Высокий 8.8

• CVE-2024-4010подписчик+≤ 5.7.19

  Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request

  Высокий 8.8

• CVE-2018-6015без авторизации

  An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress.

  Высокий 7.5

• CVE-2025-66055высокие права≤ 5.9.10

  WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerability

  Высокий 7.2

• CVE-2023-5414админ≤ 5.6.23

  Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read

  Высокий 7.2

• CVE-2026-81290без авторизации · нужен клик≤ 5.9.33

  WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-22300без авторизации · нужен клик≤ 5.7.11

  WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-12757без авторизации≤ 5.9.27

  Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field

  Средний 6.5

• CVE-2026-1651админ≤ 5.9.16

  Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter

  Средний 6.5

• CVE-2024-8254подписчик+≤ 5.7.34

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Sh

  Средний 6.3

• CVE-2019-14364без авторизации · нужен клик

  An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript c

  Средний 6.1

• CVE-2018-0602без авторизации · нужен клик

  Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary we

  Средний 6.1

• CVE-2025-12348без авторизации≤ 5.9.10

  Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution

  Средний 5.3

• CVE-2025-12349без авторизации≤ 5.9.10

  Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Trigger

  Средний 5.3

• CVE-2024-2656админ≤ 5.7.15

  Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import

  Средний 4.4

• CVE-2024-8771подписчик+≤ 5.7.34

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (

  Средний 4.3

• CVE-2024-5703подписчик+≤ 5.7.26

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization

  Средний 4.3

• CVE-2024-3626подписчик+≤ 5.7.17

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization

  Средний 4.3

• CVE-2026-11592участник+≤ 5.9.27

  Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action

  Средний 4.3