Advisories · Technology

Icegram Email Subscribers & Newsletters.

Every CVE that names Icegram Email Subscribers & Newsletters among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81290 CVE record

CVSS 7.1 High

WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability
- Icegram Email Subscribers & Newsletters
- Cross-site scripting (XSS)
Not analysed yet 31 Aug 2026
CVE-2025-66055 CVE record

CVSS 7.2 High

WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerability
- Icegram Email Subscribers & Newsletters
- Insecure deserialization
Not analysed yet 21 Nov 2025
CVE-2024-37252 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability
- Icegram Email Subscribers & Newsletters
- SQL injection
Not analysed yet 26 Jun 2024
CVE-2024-22300 CVE record

CVSS 7.1 High

WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability
- Icegram Email Subscribers & Newsletters
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2018-0602 CVE record

icegram Email Subscribers & Newsletters: Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to…
- icegram Email Subscribers & Newsletters
Not analysed yet 26 Jun 2018