Skip to content
Sign in
6.5 Medium

CVE-2024-12311 The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before…

Description

The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

Affected products and versions

Product Affected versions Fixed in
Email Subscribers by Icegram Express 5.7 earliest → < 5.7.44 5.7.44

Other CVEs of Email Subscribers by Icegram Express

The 5 CVEs of Email Subscribers by Icegram Express →
CVE-2024-12567 The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form… 4.8 Medium CVE-2024-12568 The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its… 4.8 Medium CVE-2024-12566 The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form… 4.8 Medium CVE-2024-11636 The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text… 4.8 Medium
Track this CVE