Icegram
D
RISKY
40
Total CVEs
11
Crit / High
19
Medium
15%
Unpatched
0%
Patched
6.5
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 0 patched ✗ 4 unpatched ~ 23 under review
Intelligence by Audience
PoC Available
17 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"icegram" port:443
org:"Icegram" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
40
Critical severity
5
Actively exploited (CISA)
0
Unpatched ratio
15%
Avg CVSS score
6.5
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
No recent security news found for Icegram.
Recent CVEs
showing 20 of 27
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-97284 | 8.8 HIGH | UNKNOWN / UNPATCHED | — | 2026-10-01 |
| CVE-2026-12757 PoC | 6.5 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-09-07 |
| CVE-2025-15692 PoC | 3.5 LOW | UNKNOWN / UNPATCHED | — | 2026-09-02 |
| CVE-2025-68507 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.07% | 2026-01-22 |
| CVE-2025-68038 PoC | 7.2 HIGH | PATCH UNDER REVIEW | 0.13% | 2025-12-24 |
| CVE-2025-12348 PoC | 5.3 MEDIUM | PATCH UNDER REVIEW | 0.21% | 2025-12-12 |
| CVE-2025-66055 PoC | 7.2 HIGH | PATCH UNDER REVIEW | 0.11% | 2025-11-21 |
| CVE-2025-12349 PoC | 5.3 MEDIUM | PATCH UNDER REVIEW | 0.17% | 2025-11-19 |
| CVE-2025-49917 PoC | 4.4 MEDIUM | PATCH UNDER REVIEW | 0.02% | 2025-10-22 |
| CVE-2025-47527 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.23% | 2025-06-09 |
| CVE-2024-13486 PoC | ? N/A | PATCH UNDER REVIEW | 0.59% | 2025-05-15 |
| CVE-2024-13482 PoC | ? N/A | PATCH UNDER REVIEW | 0.18% | 2025-05-15 |
| CVE-2025-0671 | ? N/A | PATCH UNDER REVIEW | 0.19% | 2025-04-25 |
| CVE-2024-11924 PoC | ? N/A | PATCH UNDER REVIEW | 0.22% | 2025-04-17 |
| CVE-2025-24542 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.35% | 2025-01-24 |
| CVE-2024-12568 PoC | ? N/A | PATCH UNDER REVIEW | 0.16% | 2025-01-13 |
| CVE-2024-12567 PoC | ? N/A | PATCH UNDER REVIEW | 0.16% | 2025-01-13 |
| CVE-2024-12566 | ? N/A | PATCH UNDER REVIEW | 0.16% | 2025-01-13 |
| CVE-2024-11636 PoC | ? N/A | PATCH UNDER REVIEW | 0.25% | 2025-01-13 |
| CVE-2024-12311 PoC | ? N/A | PATCH UNDER REVIEW | 0.53% | 2025-01-06 |
Intel
CountryIndia
LicenseFreemium
Trust ScoreD — RISKY
Max CVSS9.8
Last Updated2026-08-03
Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
14 occurrences in Icegram CVEs
(35% of total)
CWE-862
Unknown Weakness Type
10 occurrences in Icegram CVEs
(25% of total)
CWE-89
SQL Injection
9 occurrences in Icegram CVEs
(23% of total)
CWE-502
Deserialization of Untrusted Data
2 occurrences in Icegram CVEs
(5% of total)
CWE-306
Missing Authentication
1 occurrence in Icegram CVEs
(3% of total)
CWE-862 (Missing Authorization)
Unknown Weakness Type
1 occurrence in Icegram CVEs
(3% of total)
CWE-918
Server-Side Request Forgery (SSRF)
1 occurrence in Icegram CVEs
(3% of total)
CWE-352
Cross-Site Request Forgery (CSRF)
1 occurrence in Icegram CVEs
(3% of total)
Company Profile
Icegram is an Indian software company that develops email marketing, lead generation, and conversion optimization plugins for WordPress. Their products, including Icegram Engage, Popup Maker, and MailOptin, are widely used by small to medium businesses to create popups, opt-in forms, and email campaigns. From a cybersecurity perspective, the company's plugins have been associated with multiple CVEs, primarily involving cross-site scripting (XSS) and other vulnerabilities that could affect WordPress site security.
Response Metrics
Est. MTTR ⓘ
~500 days
(Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -82% better
CVE count 2026 vs 2025:
17 → 3 CVEs
Patch Speed ⓘ Poor (>65% open)
15% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€650K
Est. GDPR High
€6.5M
Based on 5 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Icegram D valtersit.com