WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ibtana-visual-editor
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
ibuildapp
Published
2025-01-14
Title
iBuildApp <= 0.2.0 - Reflected XSS
Slug
icafe-library
Published
2025-04-25
Title
iCafe Library <= 1.8.3 - Authenticated (Editor+) SQL Injection
Slug
ical-feeds
Published
2025-04-10
Title
iCal Feeds <= 1.5.3 - Reflected Cross-Site Scripting
Slug
icalendrier
Published
2024-03-25
Title
iCalendrier < 1.81 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
icdsoft-reseller-store
Published
2024-12-11
Title
ICDSoft Reseller Store < 2.5.0 - Reflected Cross-Site Scripting
Slug
icegram
Published
2016-07-19
Title
Icegram <= 1.9.18 - Cross-Site Request Forgery (CSRF) & XSS
Slug
icegram
Published
2019-07-09
Title
Icegram < 1.10.29 - CSRF to Stored XSS
Slug
icegram
Published
2021-08-17
Title
Icegram < 2.0.3 - Admin+ Stored Cross-Site Scripting
Slug
icegram
Published
2021-11-22
Title
Icegram < 2.0.5 - Reflected Cross-Site Scripting
Slug
icegram
Published
2022-06-01
Title
Icegram < 2.1.8 - Contributor+ Stored Cross-Site Scripting
Slug
icegram
Published
2023-05-22
Title
Icegram Engage < 3.1.12 - Reflected XSS
Slug
icegram
Published
2023-12-27
Title
Icegram < 3.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message
Slug
icegram
Published
2023-12-28
Title
Icegram < 3.1.19 - Cross-Site Request Forgery via save_campaign_preview
Slug
icegram
Published
2024-01-05
Title
Icegram < 3.1.22 - Contributor+ Campaign Status Toggle / Duplication
Slug
icegram
Published
2024-07-22
Title
Icegram < 3.1.25 - Missing Authorization to Unauthenticated Message Duplication
Slug
icegram
Published
2024-08-16
Title
Icegram < 3.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
icegram
Published
2024-08-12
Title
Icegram < 3.1.25 - Missing Authorization
Slug
icegram
Published
2024-12-16
Title
Icegram Engage < 3.1.32 - Author+ Stored XSS
Slug
icegram
Published
2025-01-24
Title
Icegram < 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
icegram
Published
2024-11-27
Title
Icegram Engage < 3.1.32 - Admin+ Stored XSS
Slug
icegram
Published
2024-11-28
Title
Icegram Engage < 3.1.32 - Admin+ Stored XSS
Slug
icegram-rainmaker
Published
2023-02-06
Title
Icegram Collect < 1.3.9 - Contributor+ Stored XSS
Slug
icegram-rainmaker
Published
2024-08-12
Title
Icegram Collect – Easy Form, Lead Collection and Subscription plugin < 1.3.15 - Missing Authorization
Slug
icegram-rainmaker
Published
2025-06-04
Title
Icegram Collect – Easy Form, Lead Collection and Subscription plugin < 1.3.19 - Missing Authorization