GCVE - cpe:2.3:a:icegram:icegram_collect:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:icegram:icegram_collect:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Icegram (`4ca468ee-dbe6-5dc5-9b8a-a191dfaeac5f`)
Product	Icegram Collect (`e6e5d697-df51-559c-bb62-91e8db58b337`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/icegram/icegram`	purl2cpe	2026-06-01 10:12:14.517863

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-47527`	vulnerable	2026-06-08 07:27:14.508649	WordPress Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.18 - Broken Access Control Vulnerability HIGH (7.1) Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegram Collect: from n/a through <= 1.3.18. Published: 2025-06-09T15:54:09.986Z Updated: 2026-04-28T16:12:44.063Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/icegram-rainmaker/vulnerability/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-1-3-18-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-43273`	vulnerable	2026-06-08 06:45:49.994921	WordPress Icegram Collect plugin <= 1.3.14 - Broken Access Control vulnerability MEDIUM (5.4) Missing Authorization vulnerability in icegram Icegram Collect plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegram Collect plugin: from n/a through 1.3.14. Published: 2024-11-01T14:17:33.236Z Updated: 2026-04-28T16:10:11.234Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/icegram-rainmaker/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-plugin-1-3-14-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25024`	vulnerable	2026-06-08 05:56:08.403885	WordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS) MEDIUM (5.9) Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Icegram Icegram Collect plugin <= 1.3.8 versions. Published: 2023-04-07T10:51:04.822Z Updated: 2026-04-28T16:08:06.670Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/icegram-rainmaker/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-plugin-1-3-8-cross-site-scripting-xss?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.