PatchTheCVEicegram vulnerabilities
Recent CVEs affecting icegram products. 11 tracked.
icegram has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-05-15. Highest priority: CVE-2024-12311 (score 40/100).
- CVE-2025-0671 MEDIUM 6.1 UPGRADE The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings
- CVE-2024-8771 MEDIUM 4.3 UPGRADE The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerc
- CVE-2024-13486 MEDIUM 4.8 UPGRADE The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which co
- CVE-2024-13482 MEDIUM 4.8 UPGRADE The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which co
- CVE-2024-12568 MEDIUM 4.8 UPGRADE The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of
- CVE-2024-12567 MEDIUM 4.8 UPGRADE The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of
- CVE-2024-12566 MEDIUM 4.8 UPGRADE The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of
- CVE-2024-12311 MEDIUM 6.5 UPGRADE The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parame
- CVE-2024-12302 MEDIUM 6.1 UPGRADE The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings,
- CVE-2024-11924 LOW 3.5 UPGRADE The Icegram Express formerly known as Email Subscribers WordPress plugin before 5.7.52 does not sanitise and
- CVE-2024-11636 MEDIUM 4.8 UPGRADE The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of
FAQ
How do I fix icegram vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is icegram being exploited right now?
None of the tracked icegram CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which icegram CVE should I patch first?
CVE-2024-12311 currently ranks highest (40/100): The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parame.