WordPress security by component

Email Subscribers by Icegram Express

Plugin description

Email Subscribers by Icegram Express is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 15, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: email-subscribers-by-icegram-express

Latest vulnerability

CVE-2024-4010: Email Subscribers by Icegram Express: SQL injection

Email Subscribers by Icegram Express is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedMay 15, 2024

Safe version guidanceSee mitigation notes

		Safe version
May 15, 2024	CVE-2024-4010 Email Subscribers by Icegram Express: SQL injection Email Subscribers by Icegram Express is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVDPending