cleantalk
Vulnerabilities and Security Researches

Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce, 8ab74be925c40b18dff4ec4d2ff8990ef1bd34a8

Published on
Aug 10, 2015
Research Description
Email Subscribers &amp; Newsletters &#8211; Email Marketing, Post Notifications &amp; Newsletter Plugin for WordPress [email-subscribers] < 2.9.1 WordPress Email Subscribers Plugin <= 2.9 - Multiple Vulnerabilities This plugin is prone to a cross site scripting and SQL injection vulnerabilities. Because of them, attackers can inject arbitrary HTML or JS code or execute arbitrary SQL commands. Update the plugin.
Affected versions
max 2.9.1.
Status
vulnerable