Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-45810 EUVD-2022-48664GHSA-wr7v-h9p2-5fr6

WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Icegram Product: Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce Category: Web / CMS

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce.This issue affects Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce: from n/a through 5.5.2.

Affected products

VendorProductAffectedFixed
Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce ≤ 5.5.2 —

References