Vulnerabilities > Icegram > Email Subscribers Newsletters > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-07-28 CVE-2019-14364 Cross-site Scripting vulnerability in Icegram Email Subscribers & Newsletters 4.1.6
An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpx_name wp-admin/admin-ajax.php POST parameter.
network
low complexity
icegram CWE-79
6.1
6.1
2018-01-26 CVE-2018-6015 Information Exposure vulnerability in Icegram Email Subscribers & Newsletters
An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress.
network
low complexity
icegram CWE-200
5.0
5.0