WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
email-subscriber
Published
2021-07-24
Title
Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
email-subscribers
Published
2015-08-10
Title
Email Subscribers & Newsletters < 2.9.1 - Multiple XSS & SQLi
Slug
email-subscribers
Published
2018-01-24
Title
Email Subscribers & Newsletters < 3.4.8 - Unauthenticated Subscriber Download
Slug
email-subscribers
Published
2018-05-28
Title
Email Subscribers & Newsletters < 3.5.0 - Cross-Site Scripting (XSS)
Slug
email-subscribers
Published
2019-07-22
Title
Email Subscribers & Newsletters < 4.1.8 - SQL Injection
Slug
email-subscribers
Published
2019-07-12
Title
Email Subscribers & Newsletters < 4.1.7 - Cross-Site Scripting (XSS)
Slug
email-subscribers
Published
2019-11-13
Title
Email Subscribers & Newsletters < 4.2.3 - Multiple Issues
Slug
email-subscribers
Published
2019-11-13
Title
Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection
Slug
email-subscribers
Published
2020-07-18
Title
Email Subscribers & Newsletters < 4.5.1 - Cross-site Request Forgery in send_test_email()
Slug
email-subscribers
Published
2020-07-18
Title
Email Subscribers & Newsletters < 4.5.1 - Authenticated SQL injection in es_newsletters_settings_callback()
Slug
email-subscribers
Published
2020-09-10
Title
Email Subscribers & Newsletters < 4.5.6 - Unauthenticated email forgery/spoofing
Slug
email-subscribers
Published
2022-02-11
Title
Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection
Slug
email-subscribers
Published
2022-02-11
Title
Email Subscribers & Newsletters < 5.3.2 - Unauthenticated arbitrary option update
Slug
email-subscribers
Published
2022-11-21
Title
Icegram Express < 5.5.1 - Subscriber+ SQLi
Slug
email-subscribers
Published
2023-10-11
Title
Icegram Express < 5.6.24 - Admin+ Directory Traversal
Slug
email-subscribers
Published
2023-02-06
Title
Email Subscribers & Newsletters < 5.5.3 - Improper Neutralization of Formula Elements in a CSV File
Slug
email-subscribers
Published
2024-03-26
Title
Email Subscribers & Newsletters < 5.7.12 - Reflected Cross-Site Scripting via campaign_id
Slug
email-subscribers
Published
2024-04-05
Title
Icegram Express < 5.7.16 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
Slug
email-subscribers
Published
2024-04-05
Title
Email Subscribers & Newsletters < 5.7.14 - Missing Authorization
Slug
email-subscribers
Published
2024-04-15
Title
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin < 5.7.15 - Unauthenticated SQL Injection
Slug
email-subscribers
Published
2024-05-14
Title
Email Subscribers by Icegram Express < 5.7.20 - Missing Authorization in handle_ajax_request
Slug
email-subscribers
Published
2024-05-22
Title
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce < 5.7.18 - Missing Authorization
Slug
email-subscribers
Published
2024-06-04
Title
Email Subscribers by Icegram Express < 5.7.21 - Unauthenticated SQL Injection via hash
Slug
email-subscribers
Published
2024-06-11
Title
Icegram Express < 5.7.23 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]
Slug
email-subscribers
Published
2024-06-20
Title
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin < 5.7.24 - Unauthenticated SQL Injection via optin