Advisories · Technology

Icegram Express Pro.

Every CVE that names Icegram Express Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-68038 CVE record

CVSS 7.2 High

WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability
- Icegram Express Pro
- Insecure deserialization
Not analysed yet 24 Dec 2025
CVE-2025-49917 CVE record

CVSS 4.4 Medium

WordPress Icegram Express Pro plugin <= 5.9.5 - Server Side Request Forgery (SSRF) vulnerability
- Icegram Express Pro
- Server-side request forgery (SSRF)
Not analysed yet 22 Oct 2025