CVE-2020-5768: Icegram Email Subscribers & Newsletters

Medium severity, CVSS 4.9. EPSS: 2% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to determine the value of database fields.

Affected products

• Icegram Email Subscribers & Newsletters: version 4.4.8 only

Published 2020-07-17. Last modified 2026-06-17.