CVE-2025-68038: Icegram Express Pro

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Object Injection.This issue affects Icegram Express Pro: from n/a through < 5.9.14.

Affected products

• Icegram Icegram Express Pro: up to and including 5.9.14

Published 2025-12-24. Last modified 2026-10-07.