Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

Güvenlik açıkları

• CVE-2024-6172kimlik doğrulamasız≤ 5.7.25

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubs

  Kritik 9.8

• CVE-2024-5756kimlik doğrulamasız≤ 5.7.23

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin

  Kritik 9.8

• CVE-2024-31352kimlik doğrulamasız≤ 5.7.13

  WordPress Icegram Express plugin <= 5.7.13 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2024-4295kimlik doğrulamasız≤ 5.7.20

  Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

  Kritik 9.8

• CVE-2024-2876kimlik doğrulamasız≤ 5.7.14

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection

  Kritik 9.8

• CVE-2022-45810kimlik doğrulamasız · tıklama gerekir≤ 5.5.2

  WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

  Kritik 9.8

• CVE-2019-13569kimlik doğrulamasız

  A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress.

  Kritik 9.8

• CVE-2024-37252kimlik doğrulamasız≤ 5.7.25

  WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2024-4845abone+≤ 5.7.22

  Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]

  Yüksek 8.8

• CVE-2024-4010abone+≤ 5.7.19

  Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request

  Yüksek 8.8

• CVE-2018-6015kimlik doğrulamasız

  An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress.

  Yüksek 7.5

• CVE-2025-66055yüksek yetki≤ 5.9.10

  WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerability

  Yüksek 7.2

• CVE-2023-5414yönetici≤ 5.6.23

  Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read

  Yüksek 7.2

• CVE-2026-81290kimlik doğrulamasız · tıklama gerekir≤ 5.9.33

  WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-22300kimlik doğrulamasız · tıklama gerekir≤ 5.7.11

  WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-12757kimlik doğrulamasız≤ 5.9.27

  Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field

  Orta 6.5

• CVE-2026-1651yönetici≤ 5.9.16

  Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter

  Orta 6.5

• CVE-2024-8254abone+≤ 5.7.34

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Sh

  Orta 6.3

• CVE-2019-14364kimlik doğrulamasız · tıklama gerekir

  An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript c

  Orta 6.1

• CVE-2018-0602kimlik doğrulamasız · tıklama gerekir

  Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary we

  Orta 6.1

• CVE-2025-12348kimlik doğrulamasız≤ 5.9.10

  Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution

  Orta 5.3

• CVE-2025-12349kimlik doğrulamasız≤ 5.9.10

  Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Trigger

  Orta 5.3

• CVE-2024-2656yönetici≤ 5.7.15

  Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import

  Orta 4.4

• CVE-2024-8771abone+≤ 5.7.34

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (

  Orta 4.3

• CVE-2024-5703abone+≤ 5.7.26

  Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization

  Orta 4.3

• CVE-2024-3626abone+≤ 5.7.17

  Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization

  Orta 4.3

• CVE-2026-11592katılımcı+≤ 5.9.27

  Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action

  Orta 4.3