Skip to content
OpenAdvisories

Vendor

Icegram

40 known vulnerabilities.

Products

Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress 16 Icegram 7 Email Subscribers & Newsletters 5 Icegram Collect 3 Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building 2 Icegram Express Pro 2 Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram 1 Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce 1 Icegram Engage – Popups, Optins, CTAs & Lead Generation 1 Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs 1 Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-97284

    WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability

    Contributor PHP Object Injection in Icegram <= 3.1.31 versions.

    Icegram Icegram
  • High 7.1
    CVE-2026-81290

    WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.

    Icegram Email Subscribers & Newsletters
  • High 7.2
    CVE-2025-68038

    WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Object Injection.This issue affects Icegram Express Pro: from n/a through < 5.9.14.

    Icegram Icegram Express Pro
  • High 7.2
    CVE-2025-66055

    WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Icegram Email Subscribers & Newsletters email-subscribers allows Object Injection.This issue affects Email Subscribers & Newsletters: from n/a through <= 5.9.10.

    Icegram Email Subscribers & Newsletters
  • High 7.1
    CVE-2025-47527

    WordPress Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.18 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegram Collect: from n/a through <= 1.3.18.

    Icegram Icegram Collect
  • High 8.8
    CVE-2024-4845

    Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]

    The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘options[list_id]’ parameter in all versions up to, and including, 5.7.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exi…

    Icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress Web / CMS
  • High 8.8
    CVE-2024-4010

    Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request

    The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handle_ajax_request function in all versions up to, and including, 5.7.…

    Icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress Web / CMS
  • High 7.1
    CVE-2024-22300

    WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Icegram Email Subscribers & Newsletters allows Reflected XSS.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.11.

    Icegram Email Subscribers & Newsletters