Lucene search
+L

443 matches found

CNNVD
CNNVD
added 2024/11/01 12:00 a.m.9 views

WordPress plugin Icegram 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00359EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.12 views

PT-2024-30437 · WordPress · Icegram Collect

Name of the Vulnerable Software and Affected Versions: Icegram Collect plugin versions 1.3.14 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For Icegram...

5.4CVSS6.5AI score0.0041EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.8 views

PT-2024-28561 · Icegram · Icegram

Name of the Vulnerable Software and Affected Versions: Icegram versions 3.1.24 and earlier Description: The issue affects Icegram due to missing authorization, allowing access to functionality not properly constrained by ACLs. Recommendations: For Icegram versions 3.1.24 and earlier, update to a...

5.3CVSS6.6AI score0.00359EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.11 views

WordPress plugin Icegram Collect 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.5AI score0.0041EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/10/09 7:24 p.m.127 views

Exploit for CVE-2024-2876

CVE-2024-2876 - SQL Injection Vulnerability in Email Subscribe...

9.8CVSS8.7AI score0.80596EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2024/10/09 7:24 p.m.170 views

Exploit for CVE-2024-2876

CVE-2024-2876 - SQL Injection Vulnerability in Email Subscribe...

9.8CVSS10AI score0.80596EPSS
SaveExploits4
Cvelist
Cvelist
added 2024/10/02 6:46 a.m.41 views

CVE-2024-8254 Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.7.34. This is due to the software allowing users to execute an action that do...

5.4CVSS0.00495EPSS
SaveExploits0References3
CVE
CVE
added 2024/10/02 6:46 a.m.68 views

CVE-2024-8254

CVE-2024-8254 affects the Email Subscribers by Icegram Express for WordPress (

6.3CVSS6.5AI score0.00495EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/10/02 12:42 a.m.9 views

WordPress Email Subscribers by Icegram Express wplugin <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Email Subscribers & Newsletters versions = 5.7.34...

6.3CVSS7.1AI score0.00495EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/10/02 12:00 a.m.8 views

WordPress plugin Email Subscribers by Icegram Express 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code injection vulnerability exists in the WordPres...

6.3CVSS8AI score0.00495EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/01 12:00 a.m.13 views

PT-2024-38892 · Icegram Express · Email Subscribers

Name of the Vulnerable Software and Affected Versions: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress versions up to, and including, 5.7.34 Description: The issue is related to arbitrary shortcode execution due to t...

6.3CVSS7.8AI score0.00495EPSS
SaveExploits0References9
OSV
OSV
added 2024/09/26 4:15 p.m.8 views

CVE-2024-8771

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'previewemailtemplatedesign' function in all versions up to, and including,...

4.3CVSS5.8AI score0.00361EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/09/26 3:30 p.m.23 views

CVE-2024-8771 Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'previewemailtemplatedesign' function in all versions up to, and including,...

4.3CVSS0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/09/26 12:00 a.m.6 views

WordPress plugin Email Subscribers by Icegram Express 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the WordPress plugin...

4.3CVSS6.3AI score0.00361EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/09/26 12:00 a.m.13 views

PT-2024-39239 · Icegram Express · Email Subscribers

Name of the Vulnerable Software and Affected Versions: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin versions up to, and including, 5.7.34 Description: The issue allows unauthorized access to data due to a missing capability che...

4.3CVSS6.2AI score0.00361EPSS
SaveExploits0References9
GithubExploit
GithubExploit
added 2024/09/14 4:08 p.m.111 views

Exploit for CVE-2024-2876

CVE-2024-2876 Description Of Vulnerability: The Email Subscr...

9.8CVSS9.7AI score0.80596EPSS
SaveExploits4
NVD
NVD
added 2024/08/19 6:15 p.m.22 views

CVE-2024-43272

Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...

5.3CVSS0.00362EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/08/19 6:15 p.m.7 views

CVE-2024-43272

Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...

5.3CVSS5.1AI score0.00362EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/19 5:43 p.m.28 views

CVE-2024-43272 WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Unpublished Campaign Viewer vulnerability

Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...

5.3CVSS0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/19 5:43 p.m.28 views

CVE-2024-43272 WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Unpublished Campaign Viewer vulnerability

Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...

5.3CVSS7.2AI score0.00362EPSS
SaveExploits0References1
Rows per page
Query Builder