CVE-2025-47527 PUBLISHED

WordPress Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.18 - Broken Access Control Vulnerability

Assigner: Patchstack
Reserved: 07.05.2025 Published: 09.06.2025 Updated: 01.04.2026

Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegram Collect: from n/a through <= 1.3.18.

Product Status

Vendor	Icegram
Product	Icegram Collect
Versions	Default: unaffected affected from 0 to 1.3.18 (incl.)

Credits

ch4r0n | Patchstack Bug Bounty Program finder

References

https://patchstack.com/database/Wordpress/Plugin/icegram-rainmaker/vulnerability/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-1-3-18-broken-access-control-vulnerability?_s_id=cve

Problem Types

Missing Authorization CWE

Impacts

Exploiting Incorrectly Configured Access Control Security Levels