Vulnerability history

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Contributor+) Settings Modification vulnerability

Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter vulnerability

WordPress Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin <= 5.7.17 - Missing Authorization vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability

Missing Authentication to Unauthenticated Action Scheduler Task Execution vulnerability

Missing Authentication to Unauthenticated Mailing Queue Trigger vulnerability

PHP Object Injection vulnerability

Admin+ Stored XSS in Template vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability

Admin+ SQL Injection vulnerability

Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Missing Authorization vulnerability

Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability

Authenticated (Subscriber+) SQL Injection vulnerability via options[list_id] vulnerability

Unauthenticated SQL Injection via hash vulnerability

Missing Authorization in handle_ajax_request vulnerability

Unauthenticated SQL Injection vulnerability

Authenticated (Administrator+) Cross-Site Scripting via CSV import vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Authenticated (Administrator+) Directory Traversal to Arbitrary File Read vulnerability

CSV Injection

Unauthenticated email forgery/spoofing vulnerability

Authenticated SQL injection (SQLi) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Multiple security issues

Cross-Site Scripting (XSS) vulnerability

Missing Function Level Access Control vulnerability

Multiple Vulnerabilities