Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce, CVE-2019-13569
- CVE, Research URL
- Home page URL
- Application
-
Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce
- Published on
- Jul 20, 2019
- Research Description
- A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.
- Affected versions
-
Min -, max 4.1.8.
- Status
-
vulnerable