WordPress security by component
Icegram Mailer
Plugin description
Icegram Mailer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 01, 2026; the highest published CVSS base score is 4.9.
Plugin slug:
icegram-mailerLatest vulnerability
CVE-2026-15951: Icegram Mailer field lists permit Administrator SQL injection
Icegram Mailer through 1.0.12 takes each fields array element from request data and joins it verbatim into the SELECT clause in Icegram_Mailer_Logs_Table::get_logs(). An Administrator can submit SQL expressions without a whitelist, escaping or prepared placeholder and extract database information.
| Safe version |
|
||
|---|---|---|---|
| Aug 01, 2026 |
CVE-2026-15951
Icegram Mailer field lists permit Administrator SQL injection
Icegram Mailer through 1.0.12 takes each fields array element from request data and joins it verbatim into the SELECT clause in Icegram_Mailer_Logs_Table::get_logs(). An Administrator can submit SQL expressions without a whitelist, escaping or prepared placeholder and extract database information.
|
> 1.0.12 |
CVE4.9
NVDPending
|