plugin

Icegram Mailer Vulnerabilities

1 known security issue reported for the Icegram Mailer WordPress plugin. Most recent disclosed Jul 31, 2026.

1 medium

Running Icegram Mailer on your site? Check whether your installed version is affected.

Icegram Mailer <= 1.0.12 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter

medium

The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and including, 1.0.12. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the Icegram_Mailer_Logs_Table::get_logs() functi...

CVSS:: 4.9
Affected:: up to 1.0.12
Fixed in:: 1.0.13
Disclosed:: Jul 31, 2026

CVE-2026-15951 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database