Critical
CVE-2024-4295
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 49
Reset filters
Medium
CVE-2024-3626
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization
High
CVE-2024-4010
Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request
Critical
CVE-2024-2876
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
Medium
CVE-2024-31352
Email Subscribers & Newsletters <= 5.7.13 - Missing Authorization
Medium
CVE-2024-2656
Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
Medium
CVE-2024-22300
Email Subscribers & Newsletters <= 5.7.11 - Reflected Cross-Site Scripting via campaign_id
Critical
CVE-2023-5414
Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
Medium
CVE-2022-45810
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
High
CVE-2022-3981
Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection
High
CVE-2022-0439
Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection
Medium
CVE-2020-5780
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Medium
CVE-2020-5768
Icegram Email Subscribers & Newsletters <= 4.5.0 - Authenticated SQL Injection
High
CVE-2020-5767
Icegram Email Subscribers & Newsletters Plugin for WordPress <= 4.5.0 - Cross-Site Request Forgery
Medium
CVE-2019-19982
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated Option Creation
Medium
CVE-2019-19981
Email Subscribers & Newsletters <= 4.2.2 - Cross-Site Request Forgery on Settings
Medium
CVE-2019-19985
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated File Download w/ Information Disclosure
Medium
CVE-2019-19980
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization to Test Email
Medium
CVE-2019-19984
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization
High
CVE-2019-20361
Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection
Critical
CVE-2019-13569
Email Subscribers & Newsletters <= 4.1.7 - SQL Injection
Medium
CVE-2019-14364
Email Subscribers & Newsletters <= 4.1.6 - Cross-Site Scripting
Medium
CVE-2018-0602
Email Subscribers & Newsletters <= 3.4.12 - Cross-Site Scripting
High
CVE-2018-6015
Email Subscribers & Newsletters <= 3.4.7 - Unauthenticated Subscriber Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.