Extension WordPress
Vulnérabilités Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Cette page rassemble les failles publiées pour Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
43 fiches
Email Subscribers & Newsletters <= 5.9.27 – Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action
The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.27. This is due to the plugin not…
*-5.9.27
5.9.28
01/07/2026
Email Subscribers & Newsletters <= 5.9.16 – Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the 'workflow_ids' parameter in all versions up to, and including, 5.9.16 due to insufficient escaping on the user supplied parameter and lack of…
*-5.9.16
5.9.17
03/03/2026
Email Subscribers & Newsletters <= 5.9.10 – Missing Authentication to Unauthenticated Action Scheduler Task Execution
The Icegram Express – Email Subscribers, Newsletters and Marketing Automation Plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.9.10. This is due to the plugin not properly verifying that a user is…
*-5.9.10
5.9.11
11/12/2025
Email Subscribers & Newsletters <= 5.9.10 – Missing Authentication to Unauthenticated Mailing Queue Trigger
The Icegram Express – Email Subscribers, Newsletters and Marketing Automation Plugin for WordPress is vulnerable to Authorization in versions up to, and including, 5.9.10. This is due to the plugin not properly verifying that a user is authorized…
*-5.9.10
5.9.11
18/11/2025
Email Subscribers & Newsletters <= 5.9.10 – Authenticated (Administrator+) PHP Object Injection
The Email Subscribers & Newsletters plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 5.9.10 via deserialization of untrusted input. This makes it possible for authenticated attackers, with administrator-level access and above,…
*-5.9.10
5.9.11
08/11/2025
Email Subscribers & Newsletters <= 5.7.49 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Icegram Express formerly known as Email Subscribers – The Ultimate Email Marketing & Automation Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.7.49…
*-5.7.49
5.7.50
03/04/2025
Email Subscribers & Newsletters <= 5.7.51 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Icegram Express formerly known as Email Subscribers – The Ultimate Email Marketing & Automation Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.7.51…
*-5.7.51
5.7.52
27/03/2025
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 – Authenticated (Admin+) Stored Cross-Site Scripting via Workflow Settings
The Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Workflow Settings in all versions up to, and including, 5.7.44 due to insufficient…
*-5.7.44
5.7.45
23/12/2024
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 – Authenticated (Admin+) Stored Cross-Site Scripting via Form Settings
The Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in all versions up to, and including, 5.7.44 due to insufficient…
*-5.7.44
5.7.45
23/12/2024
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 – Authenticated (Admin+) Stored Cross-Site Scripting via Text Block
The Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Block options in all versions up to, and including, 5.7.44 due to…
*-5.7.44
5.7.45
23/12/2024
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 – Authenticated (Admin+) Stored Cross-Site Scripting
The Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.7.44 due to insufficient…
*-5.7.44
5.7.45
23/12/2024
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 – Authenticated (Admin+) SQL Injection
The Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'data[datalorder_by_column]' parameter in all versions up to, and including, 5.7.43 due to insufficient…
*-5.7.43
5.7.44
16/12/2024
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 – Authenticated (Subscriber+) Arbitrary Shortcode Execution
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.7.34. This is due to the software…
*-5.7.34
5.7.35
01/10/2024
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 – Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'preview_email_template_design' function in all versions…
*-5.7.34
5.7.35
25/09/2024
Icegram Express – Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 – Missing Authorization
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized API access due to a missing capability check in all versions up to, and including, 5.7.26.…
*-5.7.26
5.7.27
16/07/2024
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 – Unauthenticated SQL Injection via unsubscribe
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to…
*-5.7.25
5.7.26
01/07/2024
Icegram Express – Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 – Unauthenticated SQL Injection via optin
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.23 due to…
*-5.7.23
5.7.24
20/06/2024
Icegram Express <= 5.7.22 – Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]
The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘options[list_id]’ parameter in all versions up to, and including, 5.7.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
*-5.7.22
5.7.23
11/06/2024
Email Subscribers by Icegram Express <= 5.7.20 – Unauthenticated SQL Injection via hash
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in all versions up to, and including, 5.7.20 due to insufficient escaping on the user supplied parameter and lack of…
*-5.7.20
5.7.21
04/06/2024
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 – Missing Authorization
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_template_content function in all versions…
*-5.7.17
5.7.18
22/05/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.