Medium
CVE-2024-8771
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 56
Reset filters
Medium
CVE-2024-43344
Icegram <= 3.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-43272
Icegram <= 3.1.24 - Missing Authorization
Medium
CVE-2024-43273
Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.14 - Missing Authorization
Medium
CVE-2024-39625
Icegram <= 3.1.24 - Missing Authorization to Unauthenticated Message Duplication
Medium
CVE-2024-5703
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization
Critical
CVE-2024-6172
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe
Critical
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
High
CVE-2024-4845
Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]
Critical
CVE-2024-4295
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
Medium
CVE-2024-3626
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization
High
CVE-2024-4010
Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request
Critical
CVE-2024-2876
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
Medium
CVE-2024-2656
Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
Medium
CVE-2024-21748
Icegram <= 3.1.21 - Missing Authorization
Medium
CVE-2023-52119
Icegram <= 3.1.18 - Cross-Site Request Forgery via save_campaign_preview
Medium
CVE-2023-51532
Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message
Critical
CVE-2023-5414
Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
Medium
CVE-2023-2398
Icegram Engage <= 3.1.11 - Reflected Cross-Site Scripting
Medium
CVE-2022-45810
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
Medium
CVE-2023-25024
Icegram Collect <= 1.3.8 - Authenticated(Contributor+) Cross-Site Scripting via Shortcode
High
CVE-2022-3981
Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-1776
Icegram Engage <= 2.1.7 - Cross-Site Scripting
Medium
CVE-2021-24941
Icegram <= 2.0.4 - Reflected Cross-Site Scripting via message_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.