VendorsIcegramicegram_engageall versions
Vulnerabilities

Icegram Engage

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2023-52119
WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2024-01-05 · Modified
8.8EPSS 0.002
CVE-2016-10962
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.
Published 2019-09-16 · Modified
6.5EPSS 0.006
CVE-2023-51532
WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-01 · Modified
6.5EPSS 0.003
CVE-2016-10963
The icegram plugin before 1.9.19 for WordPress has XSS.
Published 2019-09-16 · Modified
6.1EPSS 0.009
CVE-2023-2398
Icegram Engage < 3.1.12 - Reflected XSS
Published 2023-06-12 · Modified
6.1EPSS 0.005
CVE-2024-12302
Icegram Engage < 3.1.32 - Author+ Stored XSS
Published 2025-01-06 · Analyzed
6.1EPSS 0.004
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.
Published 2019-08-30 · Modified
5.4EPSS 0.010
CVE-2021-36832
WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published 2021-10-19 · Modified
5.4EPSS 0.006
CVE-2024-13486
Icegram Engage < 3.1.32 - Admin+ Stored XSS
Published 2025-05-15 · Analyzed
4.8EPSS 0.003
CVE-2024-13482
Icegram Engage < 3.1.32 - Admin+ Stored XSS
Published 2025-05-15 · Analyzed
4.8EPSS 0.003