CVE-2024-4295 Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash · CloudMap

严重CVE-2024-4295

Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash

披露于 2024/06/05 · 更新于 2025/11/17

CVSS 评分9.8/ 10.0

EPSS 概率90.3%百分位 99.6%

漏洞描述

Email Subscribers by Icegram Express <= 5.7.20 contains an unauthenticated SQL injection vulnerability via the hash parameter.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 Email-Subscribers 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-0439 Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection Email-Subscribers	高危	—	—	PoCEXP	2026/02/26
CVE-2024-2876 Wordpress Email Subscribers by Icegram Express - SQL Injection Email-Subscribers	严重	9.8	91.3%	PoCEXP	2024/05/02
wp_email_subscribers_listing WordPress Plugin Email Subscribers Listing Email-Subscribers	低危	—	—	PoCEXP	2020/07/21
CVE-2019-19985 WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval Email-Subscribers	中危	5.3	86.7%	PoCEXP	2019/12/26