Advisories · Technology

Icegram.

Every CVE that names Icegram among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97284 CVE record

CVSS 8.8 High

WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
- Icegram
- Insecure deserialization
Not analysed yet 1 Oct 2026
CVE-2025-68507 CVE record

CVSS 6.5 Medium

WordPress Icegram plugin <= 3.1.35 - Broken Access Control vulnerability
- Icegram
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2025-24542 CVE record

CVSS 6.5 Medium

WordPress Icegram Engage plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability
- Icegram
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2025
CVE-2024-39625 CVE record

CVSS 5.3 Medium

WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability
- Icegram
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-43272 CVE record

CVSS 5.3 Medium

WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Unpublished Campaign Viewer vulnerability
- Icegram
- Authentication bypass
Not analysed yet 19 Aug 2024
CVE-2024-43344 CVE record

CVSS 6.5 Medium

WordPress Icegram Engage – Ultimate WP Popup Builder, Lead Generation, Optins, and CTA plugin <= 3.1.25 - Cross Site Scripting (XSS) vulnerability
- Icegram
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2024
CVE-2024-21748 CVE record

CVSS 4.3 Medium

WordPress Icegram Engage plugin <= 3.1.21 - Broken Access Control vulnerability
- Icegram
- Broken access control
Not analysed yet 8 Jun 2024