WordPress Plugin Vulnerabilities

Icegram < 1.10.29 - CSRF to Stored XSS

Description

The Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram WordPress plugin was affected by a CSRF to Stored XSS security vulnerability.

Affects Plugins

Plugin icon
icegram
Fixed in 1.10.29

References

CVE
CVE-2019-15830
URL
https://blog.sucuri.net/2019/07/icegram-persistent-cross-site-scripting.html

Miscellaneous

Verified
No
WPVDB ID
3b65a13d-2f46-41f4-9f40-3fa8aa0e4425

Timeline

Publicly Published
2019-07-09 (about 6 years ago)
Added
2019-07-09 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2016-04-17
Title
leenk.me < 2.6.0 - XSS & CSRF
Published
2017-09-16
Title
Post Pay Counter < 2.731 - PHP Obj Injection & Access Control Issues
Published
2014-08-01
Title
Spider Catalog - Cross-Site Scripting & SQL Injection Vulnerabilities
Published
2015-02-02
Title
Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution
Published
2015-07-07
Title
NewStatPress < 1.0.6 - SQL Injection