icegram vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20211
3. 20233
4. 202420
5. 20257
6. 20268

Newest CVEs

• CVE-2026-97284

  WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability

  Icegram · Icegram

  High8.8
• CVE-2026-12757

  Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field

  icegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

  Medium6.5
• CVE-2026-81290

  WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

  Icegram · Email Subscribers & Newsletters

  High7.1
• CVE-2026-15951

  Icegram Mailer <= 1.0.12 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter

  icegram · Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs

  Medium4.9
• CVE-2026-16087

  Icegram Engage <= 3.1.42 - Authenticated (Contributor+) Second-Order SQL Injection via 'messages[][id]' Parameter

  icegram · Icegram Engage – Popups, Optins, CTAs & Lead Generation

  Medium6.5
• CVE-2026-11592

  Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action

  icegram · Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress

  Medium4.3
• CVE-2026-1651

  Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter

  icegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

  Medium6.5
• CVE-2025-68507

  WordPress Icegram plugin <= 3.1.35 - Broken Access Control vulnerability

  Icegram · Icegram

  Medium6.5
• CVE-2025-68038

  WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability

  Icegram · Icegram Express Pro

  High7.2
• CVE-2025-12348

  Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution

  icegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

  Medium5.3