Vulnerabilities > Icegram > Icegram Express

DATE CVE VULNERABILITY TITLE RISK
2024-06-08 CVE-2024-21748 Unspecified vulnerability in Icegram Express
Missing Authorization vulnerability in Icegram.This issue affects Icegram: from n/a through 3.1.21.
network
low complexity
icegram
5.4
2023-11-07 CVE-2022-45810 Unspecified vulnerability in Icegram Express
Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce.This issue affects Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce: from n/a through 5.5.2.
network
low complexity
icegram
critical
9.8
2023-10-20 CVE-2023-5414 Path Traversal vulnerability in Icegram Express
The Icegram Express plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.6.23 via the show_es_logs function.
network
low complexity
icegram CWE-22
7.2