SQL Injection

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Wordpress Email Subscribers by Icegram Express - SQL InjectionCVE-2024-2876icegram · CVSS 9.8 · 81% likely

   CWE-89

2. Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via HashCVE-2024-4295icegram · CVSS 9.8 · 10% likely

   CWE-89

3. Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL InjectionCVE-2022-0439Icegram · 4.2% likely

   CWE-89

4. There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL…CVE-2019-20361Icegram · CVSS 8.3 · 85% likely

   CWE-89

5. A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a…CVE-2019-13569Icegram · 3.7% likely

   CWE-89

6. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authen…CVE-2020-5768Icegram · 2.0% likely

   CWE-89

7. Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribeCVE-2024-6172icegram · CVSS 9.8 · 1.1% likely

   CWE-89

8. Icegram Express < 5.5.1 - Subscriber+ SQLiCVE-2022-3981Icegram · CVSS 8.8 · 0.8% likely

   CWE-89

9. Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optinCVE-2024-5756icegram · CVSS 9.8 · 0.7% likely

   CWE-89

10. Email Subscribers < 5.7.44 - Admin+ SQL InjectionCVE-2024-12311Icegram · CVSS 6.5 · 0.6% likely

    CWE-89

11. WordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerabilityCVE-2024-37252Icegram · CVSS 9.3 · 0.5% likely

    CWE-89

12. Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]CVE-2024-4845icegram · CVSS 8.8 · 0.5% likely

    CWE-89

13. Icegram Engage <= 3.1.42 - Authenticated (Contributor+) Second-Order SQL Injection via 'messages[][id]' ParameterCVE-2026-16087icegram · CVSS 6.5 · 0.5% likely

    CWE-89

14. Icegram Mailer <= 1.0.12 - Authenticated (Administrator+) SQL Injection via 'fields' ParameterCVE-2026-15951icegram · CVSS 4.9 · 0.4% likely

    CWE-89

15. Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' ParameterCVE-2026-1651icegram · CVSS 6.5 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.