agentprime: icegram-email-subscribers-newsletters-email-marketing-post-notifications-newsletEvery new CVE for icegram-email-subscribers-newsletters-email-marketing-post-notifications-newslet.https://agentprime.io/CVE-2026-12757: Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Fieldhttps://agentprime.io/advisories/CVE-2026-12757/https://agentprime.io/advisories/CVE-2026-12757/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 13:28:29 GMTCVECVE-2026-1651: Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameterhttps://agentprime.io/advisories/CVE-2026-1651/https://agentprime.io/advisories/CVE-2026-1651/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 01:22:00 GMTCVECVE-2025-12348: Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Executionhttps://agentprime.io/advisories/CVE-2025-12348/https://agentprime.io/advisories/CVE-2025-12348/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 09:20:29 GMTCVECVE-2025-12349: Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Triggerhttps://agentprime.io/advisories/CVE-2025-12349/https://agentprime.io/advisories/CVE-2025-12349/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 04:28:18 GMTCVECVE-2024-8254: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2024-8254/https://agentprime.io/advisories/CVE-2024-8254/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Oct 2024 06:46:02 GMTCVECVE-2024-8771: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Expo…https://agentprime.io/advisories/CVE-2024-8771/https://agentprime.io/advisories/CVE-2024-8771/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Sep 2024 15:30:33 GMTCVECVE-2024-5703: Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2024-5703/https://agentprime.io/advisories/CVE-2024-5703/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jul 2024 07:32:18 GMTCVECVE-2024-6172: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribehttps://agentprime.io/advisories/CVE-2024-6172/https://agentprime.io/advisories/CVE-2024-6172/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jul 2024 06:49:42 GMTCVEcriticalCVE-2024-5756: Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optinhttps://agentprime.io/advisories/CVE-2024-5756/https://agentprime.io/advisories/CVE-2024-5756/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Jun 2024 04:34:10 GMTCVEcriticalCVE-2024-4845: Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]https://agentprime.io/advisories/CVE-2024-4845/https://agentprime.io/advisories/CVE-2024-4845/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 09:33:11 GMTCVECVE-2024-4295: Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hashhttps://agentprime.io/advisories/CVE-2024-4295/https://agentprime.io/advisories/CVE-2024-4295/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.10 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jun 2024 05:33:05 GMTCVEcriticalCVE-2024-3626: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2024-3626/https://agentprime.io/advisories/CVE-2024-3626/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 May 2024 05:32:14 GMTCVECVE-2024-4010: Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_requesthttps://agentprime.io/advisories/CVE-2024-4010/https://agentprime.io/advisories/CVE-2024-4010/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 May 2024 08:34:12 GMTCVECVE-2024-2876: Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-2876/https://agentprime.io/advisories/CVE-2024-2876/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.81 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:46 GMTCVEcriticalCVE-2024-2656: Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV importhttps://agentprime.io/advisories/CVE-2024-2656/https://agentprime.io/advisories/CVE-2024-2656/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 06 Apr 2024 03:24:43 GMTCVECVE-2023-5414: Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Readhttps://agentprime.io/advisories/CVE-2023-5414/https://agentprime.io/advisories/CVE-2023-5414/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Oct 2023 06:35:19 GMTCVEcritical