Icegram Express vulnerabilities
4 known vulnerabilities in Icegram Express from Icegram. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Email Subscribers & Newsletters – Email…: Improper Neutralization of Special Elements used in an SQL Command
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.23 due to insufficient
- 8.8 High severity
Email Subscribers & Newsletters – Email…: Improper Neutralization of Special Elements used in an SQL Command
The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘options[list_id]’ parameter in all versions up to, and including, 5.7.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis
- 9.8 Critical severity
Icegram Express – Email Marketing, Newsletters…: Improper Neutralization of Formula Elements in a CSV File
Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce.This issue affects Icegram Express – Email Marketing, Newsletters and Automation for Wo
- 7.2 High severity
Email Subscribers & Newsletters – Email…: Improper Limitation of a Pathname to a Restricted Directory
The Icegram Express plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.6.23 via the show_es_logs function. This allows administrator-level attackers to read the contents of arbitrary files on the server, which can con