CVE-2022-45810

概要

参考情報

• patchstack.com/database/vulnerability/email-subscribers/wordpress-icegram-express-email-subscribers-newsletters-and-marketing-automation-plugin-plugin-5-5-2-csv-injection · Third Party Advisory

icegram express のその他の脆弱性

• CVE-2025-0671中 6.1The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which could allow high privi…
• CVE-2024-11924低 3.5The Icegram Express formerly known as Email Subscribers WordPress plugin before 5.7.52 does not sanitise and escape some of its settings, w…
• CVE-2024-5756緊急 9.8The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vuln…
• CVE-2024-4845高 8.8The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘options[list_id]’ parameter in all versions up to, and incl…
• CVE-2024-21748中 5.4Missing Authorization vulnerability in Icegram.This issue affects Icegram: from n/a through 3.1.21.