CVE-2024-31352

Description

References

• patchstack.com/database/vulnerability/email-subscribers/wordpress-icegram-express-plugin-5-7-13-broken-access-control-vulnerability · Third Party Advisory

Weitere Schwachstellen in email subscribers & newsletters

• CVE-2024-12568MITTEL 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which c…
• CVE-2024-12567MITTEL 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could…
• CVE-2024-12566MITTEL 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could all…
• CVE-2024-11636MITTEL 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text Block options, which …
• CVE-2024-12311MITTEL 6.5The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL s…