WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
email-subscribers
Published
2024-03-26
Title
Email Subscribers & Newsletters < 5.7.12 - Reflected Cross-Site Scripting via campaign_id
Slug
email-subscribers
Published
2024-04-05
Title
Icegram Express < 5.7.16 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
Slug
email-subscribers
Published
2024-04-05
Title
Email Subscribers & Newsletters < 5.7.14 - Missing Authorization
Slug
email-subscribers
Published
2024-04-15
Title
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin < 5.7.15 - Unauthenticated SQL Injection
Slug
email-subscribers
Published
2024-05-14
Title
Email Subscribers by Icegram Express < 5.7.20 - Missing Authorization in handle_ajax_request
Slug
email-subscribers
Published
2024-05-22
Title
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce < 5.7.18 - Missing Authorization
Slug
email-subscribers
Published
2024-06-04
Title
Email Subscribers by Icegram Express < 5.7.21 - Unauthenticated SQL Injection via hash
Slug
email-subscribers
Published
2024-06-11
Title
Icegram Express < 5.7.23 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]
Slug
email-subscribers
Published
2024-06-20
Title
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin < 5.7.24 - Unauthenticated SQL Injection via optin
Slug
email-subscribers
Published
2024-07-01
Title
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce < 5.7.26 - Unauthenticated SQL Injection via unsubscribe
Slug
email-subscribers
Published
2024-07-16
Title
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin < 5.7.27 - Missing Authorization
Slug
email-subscribers
Published
2024-09-25
Title
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce < 5.7.35 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Slug
email-subscribers
Published
2024-10-01
Title
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce < 5.7.35 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
email-subscribers
Published
2024-12-16
Title
Email Subscribers < 5.7.44 - Admin+ SQL Injection
Slug
email-subscribers
Published
2024-12-23
Title
Email Subscribers < 5.7.45 - Admin+ Stored XSS
Slug
email-subscribers
Published
2024-12-23
Title
Email Subscribers < 5.7.45 - Admin+ Stored XSS
Slug
email-subscribers
Published
2024-12-23
Title
Email Subscribers < 5.7.45 - Admin+ Stored XSS
Slug
email-subscribers
Published
2024-12-23
Title
Email Subscribers < 5.7.45 - Admin+ Stored XSS
Slug
email-subscribers
Published
2025-03-27
Title
Email Subscribers < 5.7.52 - Admin+ Stored XSS
Slug
email-subscribers
Published
2025-04-03
Title
Email Subscribers < 5.7.50 - Admin+ Stored XSS in Template
Slug
email-subscribers
Published
2025-11-18
Title
Email Subscribers & Newsletters < 5.9.11 - Unauthenticated Mailing Queue Trigger
Slug
email-subscribers
Published
2025-11-08
Title
Email Subscribers & Newsletters < 5.9.11 - Authenticated (Administrator+) PHP Object Injection
Slug
email-subscribers
Published
2025-12-11
Title
Email Subscribers & Newsletters < 5.9.11 - Unauthenticated Action Scheduler Task Execution
Slug
email-subscribers
Published
2026-03-03
Title
Email Subscribers & Newsletters < 5.9.17 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter
Slug
email-subscribers
Published
2026-07-01
Title
Email Subscribers & Newsletters < 5.9.28 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action