İçeriğe atla
Noroxi

icegram kayıtları

icegram üreticisine ait 49 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %2
Pre-auth RCE
1
Düzeltme kaydı olan
%38,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

49 kayıt
  • CVE-2019-20361
    65Bu hafta

    There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the data

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    icegram · email subscribers \& newsletters8 Oca 2020

  • CVE-2019-19985
    42Planlayın

    The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user informat

    OrtaCVSS 5,3Kavram kanıtıEPSS %71

    icegram · email subscribers \& newsletters25 Ara 2019

  • CVE-2024-4295
    42Planlayın

    Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    icegram · email subscribers \& newsletters5 Haz 2024

  • CVE-2019-13569
    40Planlayın

    A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress.

    KritikCVSS 9,8İstismar yokEPSS %4

    icegram · email subscribers \& newsletters19 Tem 2019

  • CVE-2024-6172
    39İzleyin

    Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubs

    KritikCVSS 9,8İstismar yokEPSS %1

    icegram · email subscribers \& newsletters2 Tem 2024

  • CVE-2024-5756
    39İzleyin

    Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin

    KritikCVSS 9,8İstismar yokEPSS %1

    icegram · icegram express21 Haz 2024

  • CVE-2022-45810
    39İzleyin

    WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    icegram · icegram express7 Kas 2023

  • CVE-2024-31352
    39İzleyin

    WordPress Icegram Express plugin <= 5.7.13 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    icegram · email subscribers \& newsletters9 Haz 2024

  • CVE-2024-37252
    37İzleyin

    WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %1

    icegram · email subscribers & newsletters26 Haz 2024

  • CVE-2022-0439
    36İzleyin

    Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    icegram · email subscribers \& newsletters7 Mar 2022

  • CVE-2022-3981
    35İzleyin

    Icegram Express < 5.5.1 - Subscriber+ SQLi

    YüksekCVSS 8,8İstismar yokEPSS %1

    icegram · email subscribers \& newsletters12 Ara 2022

  • CVE-2024-4845
    35İzleyin

    Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]

    YüksekCVSS 8,8İstismar yokEPSS %0

    icegram · icegram express12 Haz 2024

  • CVE-2024-4010
    35İzleyin

    Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request

    YüksekCVSS 8,8İstismar yokEPSS %0

    icegram · email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress15 May 2024

  • CVE-2023-52119
    35İzleyin

    WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    icegram · icegram engage5 Oca 2024

  • CVE-2018-6015
    31İzleyin

    An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress.

    YüksekCVSS 7,5İstismar yokEPSS %3

    icegram · email subscribers \& newsletters26 Oca 2018

  • CVE-2023-5414
    28İzleyin

    Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read

    YüksekCVSS 7,2İstismar yokEPSS %1

    icegram · icegram express20 Eki 2023

  • CVE-2020-5767
    26İzleyin

    Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged em

    OrtaCVSS 6,5İstismar yokEPSS %1

    icegram · email subscribers \& newsletters17 Tem 2020

  • CVE-2024-12311
    26İzleyin

    Email Subscribers < 5.7.44 - Admin+ SQL Injection

    OrtaCVSS 6,5İstismar yokEPSS %1

    icegram · email subscribers \& newsletters6 Oca 2025

  • CVE-2016-10962
    26İzleyin

    The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.

    OrtaCVSS 6,5İstismar yokEPSS %1

    icegram · icegram engage16 Eyl 2019

  • CVE-2019-19984
    25İzleyin

    The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plug

    OrtaCVSS 6,3İstismar yokEPSS %1

    icegram · email subscribers \& newsletters25 Ara 2019

  • CVE-2024-8254
    25İzleyin

    Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Sh

    OrtaCVSS 6,3İstismar yokEPSS %0

    icegram · email subscribers \& newsletters2 Eki 2024

  • CVE-2019-14364
    24İzleyin

    An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript c

    OrtaCVSS 6,1İstismar yokEPSS %1

    icegram · email subscribers \& newsletters28 Tem 2019

  • CVE-2016-10963
    24İzleyin

    The icegram plugin before 1.9.19 for WordPress has XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    icegram · icegram engage16 Eyl 2019

  • CVE-2021-24941
    24İzleyin

    Icegram < 2.0.5 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    icegram · icegram21 Ara 2021

  • CVE-2023-2398
    24İzleyin

    Icegram Engage < 3.1.12 - Reflected XSS

    OrtaCVSS 6,1İstismar yokEPSS %0

    icegram · icegram engage12 Haz 2023