Vulnerabilities / Icegram Express
Icegram Express vulnerabilities
Advisories WPSec published for Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress. Other sources may list more. Its attack surface: Icegram Express on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-14 | WPSEC-2026-3140 | Icegram Express <= 5.9.42 - Authenticated (Contributor+) Insecure Direct Object Reference to Private Post Disclosure via Template Duplication | Medium 4.3 | 5.9.43 |
License: CC BY 4.0