Skip to content
Sign in
8.8 High

CVE-2022-3981 The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a…

Description

The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscriber

Affected products and versions

Product Affected versions Fixed in
Icegram Express 5.5 earliest → < 5.5.1 5.5.1

Other CVEs of Icegram Express

The 3 CVEs of Icegram Express →
CVE-2025-15692 The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before… 3.5 Low CVE-2025-0671 The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which… 6.1 Medium
Track this CVE