Icegram Engage – Popups, Optins, CTAs & Lead Generation

Vulnerabilities 20Slug icegramLatest version 3.1.42WordPress.org →

Minimum safe version

3.1.36

Update to 3.1.36 or later to address 20 fixable vulnerabilities

Latest available3.1.42 ✓

Medium 6.5

2026-01-22< 3.1.36

CVE-2025-68507

CVE Wordfence

Medium 4.8

2025-05-15< 3.1.32

CVE-2024-13482

CVE EUVD Wordfence

Medium 4.8

2025-05-15< 3.1.32

CVE-2024-13486

CVE EUVD Wordfence

Medium 6.5

2025-01-24< 3.1.32

CVE-2025-24542

CVE Wordfence EUVD

Medium 6.1

2025-01-06< 3.1.32

CVE-2024-12302

CVE Patchstack Wordfence

Medium 6.5

2024-08-18< 3.1.26

CVE-2024-43344

CVE Patchstack Wordfence

Medium 5.3

2024-08-19< 3.1.25

CVE-2024-43272

CVE Patchstack Wordfence

Medium 5.3

2024-11-01< 3.1.25

CVE-2024-39625

CVE Patchstack Wordfence

Medium 4.3

2024-06-08< 3.1.22

CVE-2024-21748

CVE Patchstack Wordfence WPScan

Medium 6.5

2024-12-27< 3.1.20

WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence WPScan

Medium 4.3

2024-12-28< 3.1.19

WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack CVE Wordfence WPScan

Medium 6.1

2023-06-22< 3.1.12

WordPress Icegram Plugin < 3.1.12 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence WPScan

Medium 5.4

2022-06-27< 2.1.8

CVE-2022-1776

CVE Patchstack Wordfence WPScan

N/A

2016-07-19< 1.9.19

WordPress Icegram Plugin <= 1.9.18 - Cross Site Request Forgery

Patchstack

N/A

2019-07-10< 1.10.29

WordPress Icegram plugin <= 1.10.28.2 - Cross-Site Request Forgery (CSRF) to Stored XSS vulnerabilities

Patchstack

Medium 5.4

2019-08-30< 1.10.29

CVE-2019-15830

CVE Wordfence WPScan

Medium 6.1

2019-09-16< 1.9.19

CVE-2016-10963

CVE Wordfence WPScan

Medium 6.5

2019-09-16< 1.9.19

CVE-2016-10962

CVE Wordfence

Medium 4.8

2021-10-19< 2.0.3

CVE-2021-36832

CVE Patchstack Wordfence WPScan

Medium 6.1

2021-12-21< 2.0.5

CVE-2021-24941

CVE Patchstack Wordfence WPScan