CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Cvelist•added 2024/07/02 6:49 a.m.•42 views

CVE-2024-6172 Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to insufficient escaping on the user supplied...

9.8CVSS0.0114EPSS

SaveExploits0References5

Vulnrichment•added 2024/07/02 6:49 a.m.•18 views

CVE-2024-6172 Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe

9.8CVSS5.9AI score0.0114EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by