WordPress icegram plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. icegram is a subscription plugin used in it. A cross-site scripting vulnerability exists in WordPress icegram plugin versions prior to...

CVE-2019-15830

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

CVE-2019-15830

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

Cross site scripting

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

CVE-2019-15830

The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...

CVE-2019-15830

CVE-2019-15830 affects the WordPress Icegram plugin prior to 1.10.29. The ig_cat_list component is vulnerable to cross-site scripting (XSS). Some sources describe a CSRF to Stored XSS variant. Remediation: upgrade to Icegram 1.10.29 or later (VendorFix). Public descriptions consistently identify ...

PT-2019-14419 · WordPress · Icegram Plugin

Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.10.29 for WordPress Description: The issue is related to an ig cat list XSS in the icegram plugin for WordPress. Recommendations: For versions prior to 1.10.29, update to version 1.10.29 or later to resolve...

Email Subscribers & Newsletters < 4.1.8 - SQL Injection

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13569

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13569

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Sql injection

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13569

The CVE-2019-13569 entry concerns the Icegram Email Subscribers & Newsletters plugin for WordPress, affected through version 4.1.7. The connected sources describe a SQL injection bug caused by improper sanitization of user input, enabling a remote attacker to execute arbitrary SQL commands on the...

CVE-2019-13569

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress Icegram Email Subscribers & Newsletters Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers Newsletters is one of the push message plugins used in it. A SQL injection vulnerability exists in WordPress Icegram...

WordPress Icegram plugin <= 1.10.28.2 - Cross-Site Request Forgery (CSRF) to Stored XSS vulnerabilities

Cross-Site Request Forgery CSRF to Stored XSS vulnerabilities found in WordPress Icegram plugin version = 1.10.28.2. Solution Update the WordPress Icegram plugin to the latest available version at least 1.10.29...

Icegram <= 1.10.28.2 - CSRF to Stored XSS

The Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram WordPress plugin was affected by a CSRF to Stored XSS security vulnerability...

JVN#16471686: WordPress plugin "Email Subscribers & Newsletters" vulnerable to cross-site scripting

The WordPress plugin "Email Subscribers & Newsletters" provided by Icegram contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provid...

WordPress Email Subscribers And Newsletters 3.4.7 Information Disclosure

Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure Google Dork: Date: 2018-01-23 Exploit Author: ThreatPress Security Vendor Homepage: http://icegram.com/ Software Link: https://wordpress.org/plugins/email-subscribers/ Version: 3.4.7 Tested on: WordPres...

WordPress Plugin Email Subscribers Newsletters 3.4.7 - Information Disclosure

WordPress Plugin Email Subscribers Newsletters 3.4.7 - Information Disclosure Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure Google Dork: Date: 2018-01-23 Exploit Author: ThreatPress Security Vendor Homepage: http://icegram.com/ Software Link:...

WordPress Email Subscribers & Newsletters 3.4.7 Plugin - Information Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure Google Dork: Date: 2018-01-23 Exploit Author: ThreatPress Security Vendor Homepage: http://icegram.com/ Software Link:...