Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

Güvenlik açıkları

• CVE-2024-6172

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubs

  Kritik 9.8

• CVE-2024-5756

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin

  Kritik 9.8

• CVE-2024-31352

  WordPress Icegram Express plugin <= 5.7.13 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2024-4295

  Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

  Kritik 9.8

• CVE-2024-2876

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection

  Kritik 9.8

• CVE-2022-45810

  WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

  Kritik 9.8

• CVE-2019-13569

  A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress.

  Kritik 9.8

• CVE-2024-37252

  WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2024-4845

  Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]

  Yüksek 8.8

• CVE-2024-4010

  Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request

  Yüksek 8.8

• CVE-2018-6015

  An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress.

  Yüksek 7.5

• CVE-2025-66055

  WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerability

  Yüksek 7.2

• CVE-2023-5414

  Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read

  Yüksek 7.2

• CVE-2026-81290

  WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-22300

  WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-12757

  Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field

  Orta 6.5

• CVE-2026-1651

  Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter

  Orta 6.5

• CVE-2024-8254

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Sh

  Orta 6.3

• CVE-2019-14364

  An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript c

  Orta 6.1

• CVE-2018-0602

  Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary we

  Orta 6.1

• CVE-2025-12348

  Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution

  Orta 5.3

• CVE-2025-12349

  Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Trigger

  Orta 5.3

• CVE-2024-2656

  Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import

  Orta 4.4

• CVE-2026-11592

  Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action

  Orta 4.3

• CVE-2024-8771

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (

  Orta 4.3

• CVE-2024-5703

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization

  Orta 4.3

• CVE-2024-3626

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization

  Orta 4.3