Skip to content
OpenAdvisories
Medium · 4.4 CVE-2025-49917 EUVD-2025-35539GHSA-6cq2-cm9p-4m4h

WordPress Icegram Express Pro plugin <= 5.9.5 - Server Side Request Forgery (SSRF) vulnerability

Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Server Side Request Forgery.This issue affects Icegram Express Pro: from n/a through <= 5.9.5.

Affected products

VendorProductAffectedFixed
Icegram Icegram Express Pro ≤ 5.9.5 —

References