CVE-2016-10963

The icegram plugin before 1.9.19 for WordPress has XSS...

CVE-2016-10962

The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php optionname parameter...

CVE-2016-10962

The vulnerability CVE-2016-10962 affects the Icegram WordPress plugin prior to version 1.9.19. The issue is a Cross-Site Request Forgery (CSRF) vulnerability via the wp-admin/edit.php?option_name parameter, which could enable unauthorized actions within the plugin’s admin context. Affected softwa...

PT-2019-7756 · Icegram · Icegram Plugin

Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.9.19 Description: The issue concerns a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2019-7755 · WordPress · Icegram

Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.9.19 Description: The issue concerns a CSRF vulnerability via the option name parameter in the "wp-admin/edit.php" endpoint. This allows for potential unauthorized actions. Recommendations: For versions prio...

WordPress Icegram Plugin < 1.10.29 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113498";...

WordPress icegram plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. icegram is a subscription plugin used in it. A cross-site scripting vulnerability exists in WordPress icegram plugin versions prior to...

CVE-2019-15830

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

CVE-2019-15830

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

Cross site scripting

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

CVE-2019-15830

CVE-2019-15830 affects the WordPress Icegram plugin prior to 1.10.29. The ig_cat_list component is vulnerable to cross-site scripting (XSS). Some sources describe a CSRF to Stored XSS variant. Remediation: upgrade to Icegram 1.10.29 or later (VendorFix). Public descriptions consistently identify ...

CVE-2019-15830

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

PT-2019-14419 · WordPress · Icegram Plugin

Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.10.29 for WordPress Description: The issue is related to an ig cat list XSS in the icegram plugin for WordPress. Recommendations: For versions prior to 1.10.29, update to version 1.10.29 or later to resolve...

Email Subscribers & Newsletters < 4.1.8 - SQL Injection

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13569

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13569

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Sql injection

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13569

The CVE-2019-13569 entry concerns the Icegram Email Subscribers & Newsletters plugin for WordPress, affected through version 4.1.7. The connected sources describe a SQL injection bug caused by improper sanitization of user input, enabling a remote attacker to execute arbitrary SQL commands on the...

CVE-2019-13569

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress Icegram Email Subscribers & Newsletters Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers Newsletters is one of the push message plugins used in it. A SQL injection vulnerability exists in WordPress Icegram...