WordPress Icegram 1.9.18 Cross Site Request Forgery

------------------------------------------------------------------------ Cross-Site Request Forgery in Icegram WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016 -----------------------------------------------------------------------...

Icegram <= 1.9.18 - Cross-Site Request Forgery (CSRF) & XSS

The Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram WordPress plugin was affected by a Cross-Site Request Forgery CSRF & XSS security vulnerability...

WordPress Icegram Plugin <= 1.9.18 - Cross Site Request Forgery

This vulnerability allows an attacker to overwrite any WordPress option with the value true. Solution Upgrade this plugin...