📦 Email Subscribers \& Newsletters

by Icegram

🔍 What is Email Subscribers \& Newsletters?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-4295

CRITICAL CVSS 9.8 Jun 5, 2024

This vulnerability allows unauthenticated attackers to perform SQL injection attacks on WordPress sites using the Email Subscribers by Icegram Express plugin. Attackers can extract sensitive informati...

CVE-2024-12566

MEDIUM CVSS 4.8 Jan 13, 2025

This vulnerability allows high-privilege WordPress users (like administrators) to inject malicious scripts into form settings in the Email Subscribers by Icegram Express plugin. When exploited, it ena...

CVE-2024-12568

MEDIUM CVSS 4.8 Jan 13, 2025

This vulnerability allows high-privilege WordPress users (like administrators) to inject malicious scripts into Workflow settings of the Email Subscribers by Icegram Express plugin. The stored XSS pay...

CVE-2024-11636

MEDIUM CVSS 4.8 Jan 13, 2025

This vulnerability allows high-privilege WordPress users (like administrators) to inject malicious scripts into Text Block options in the Email Subscribers by Icegram Express plugin. The stored XSS pa...

CVE-2024-8254

MEDIUM CVSS 5.4 Oct 2, 2024

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to execute arbitrary shortcodes through the Email Subscribers plugin. Attackers can potentially inject ma...

CVE-2024-5703

MEDIUM CVSS 4.3 Jul 17, 2024

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to perform unauthorized API operations in the Email Subscribers plugin. Attackers can add, edit, and dele...