CVE-2021-36832: Icegram Engage

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline" (&message_data[16][headline]) input.

Affected products

• Icegram Icegram Engage: up to and including 2.0.2

Published 2021-10-19. Last modified 2026-06-17.