CVE-2024-12311: Icegram Email Subscribers & Newsletters

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

Affected products

• Icegram Email Subscribers & Newsletters: before 5.7.44 (fixed in 5.7.44)

Published 2025-01-06. Last modified 2026-06-17.