Icegram Mailer – Reliable Email Deliverability, No-Code SMTP Replacement & Email Logs for WordPress
Icegram Mailer – Reliable Email Deliverability, No-Code SMTP Replacement & Email Logs for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 4.9, and the most serious one scores 4.9 out of 10.
The most common weakness is Improper Neutralization Of Special Elements Used In An SQL Command, behind 1 of the records (100%).
The one issue recorded for Icegram Mailer – Reliable Email Deliverability, No-Code SMTP Replacement & Email Logs for WordPress has a vendor fix available, so running the current release closes it.
All of these findings were reported by Wordfence PRISM. Icegram Mailer – Reliable Email Deliverability, No-Code SMTP Replacement & Email Logs for WordPress is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.
CVE-2026-15951Icegram Mailer <= 1.0.12 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter
Read the full analysisVulnerability Records

Icegram Mailer – Reliable Email Deliverability, No-Code SMTP Replacement & Email Logs for WordPress
Author
Icegram
Stop losing WordPress and WooCommerce emails to spam or broken wp_mail() servers — send transactional and marketing emails reliably with a built-in sending service, real-time email logs, open tracking, and one-click resend. Icegram Mailer is a zero-code SMTP replacement and dedicated email sending service built for WordPress and WooCommerce. Unlike traditional SMTP connector plugins that still force you to register external AWS SES, SendGrid, Mailgun, or Google Cloud OAuth accounts, Icegram Mailer includes its own high-deliverability sending infrastructure right out of the box. Install the plugin, activate your Free Plan (200 free emails every month, resetting monthly) in under 2 minutes, and ensure every order receipt, password reset, contact form alert, and newsletter lands in the inbox. Explore Features & Plans: Icegram Mailer Official Page Compare Solutions: See how Icegram Mailer stacks up against WP Mail SMTP, Post SMTP, Site Mailer, and SMTP Mailer. Why Choose Icegram Mailer Over Traditional SMTP Plugins? Most WordPress SMTP plugins are only empty bridges: you still have to configure third-party SMTP ports, manage expiring OAuth tokens, and pay $49–$99+/year just to unlock basic email logs or resend failed messages. Icegram Mailer gives you the complete stack in one lightweight plugin: Built-In Email Sending Service (No External SMTP Setup): Skip SMTP hosts, ports, and third-party API consoles. Connect directly to Icegram’s authenticated sending infrastructure in one click. 200 Free Emails Every Month: Start free with 200 emails/month (automatically resetting every month in your site’s local timezone) and scale seamlessly as your store or newsletter grows. Free Email Logs, Source Detection & 1-Click Resend: View sent and failed emails, see which plugin generated each email (WooCommerce, Contact Form 7, Icegram Express, WPForms, etc.), search/filter logs, and resend any email in one click — features other SMTP plugins lock behind Pro paywalls. Real-Time Open Tracking & Delivery Insights: Monitor sent counts, open rates, and failed deliveries directly from your WordPress dashboard, plus receive monthly summary reports. Custom Reply-To Header Support: Set a custom Reply-To email address or let your contact forms pass visitor reply addresses cleanly — never breaking form replies. Proactive Admin Failure & Quota Alerts: Receive automatic admin notifications if an email fails to send or when your site approaches its monthly sending limit. What’s New in Recent Releases (v1.0.7 – v1.0.15) Email Source Detection & Filtering (v1.0.14): Instantly identify which WordPress plugin triggered every outgoing email and filter your Email Logs by source. Enhanced Email Log Management (v1.0.11): Search logs by recipient or subject, delete old logs, and customize your Reply-To address. One-Click Email Resend (v1.0.9): Retry failed deliveries or resend any logged transactional email directly from the Email Logs screen. Admin Failure Alerts & Monthly Summaries (v1.0.10 – v1.0.12): Get notified immediately when delivery issues occur or quotas are reached, with accurate local-timezone reset dates. Multilingual Support in 7 Languages (v1.0.7): Available in English, Dutch, German, Spanish, French, Italian, and Portuguese. Handle Every WordPress & WooCommerce Email from One Setup Icegram Mailer automatically secures and delivers every outgoing email sent through WordPress wp_mail(): WooCommerce & eCommerce Transactional Emails: Order confirmations, customer invoices, shipping updates, digital download links, and abandoned cart recovery emails. Marketing & Newsletter Campaigns: Blog post notifications, weekly digests, and promotional broadcasts sent via Icegram Express, MailPoet, Newsletter, or FluentCRM. Contact Form & Lead Alerts: Instant inquiry notifications from Icegram Collect, Contact Form 7, WPForms, Forminator, Ninja Forms, and Formidable Forms. WordPress System & Membership Emails: Password resets, new user registration confirmations, two-factor authentication codes, LearnDash course updates, and BuddyBoss alerts. Tested & Compatible With Your WordPress Stack Email Marketing & CRM Plugins: Icegram Express (Email Subscribers), MailPoet, FluentCRM, Mailchimp, Constant Contact, ActiveCampaign, The Newsletter Plugin. eCommerce Stores: WooCommerce, Easy Digital Downloads (EDD). Form Builders: Icegram Collect, Contact Form 7 (CF7), WPForms, Forminator, Ninja Forms, Formidable Forms, Gravity Forms, Elementor Forms. Membership, LMS & Community Plugins: WooCommerce Memberships, LearnDash, Ultimate Member, Paid Memberships Pro, MemberPress, BuddyBoss. Why WordPress Site Owners Love Icegram Mailer (5.0 / 5 Stars) “Very fast resolution to my email problem.” – Dr. Cecil W. Thorn “Works flawlessly and also with PHP Mailer.” – Fenix71 “Best email sending service so far.” – Shashank2910 “I have been using so many plugins and WordPress websites. However, I will point out the support. They helped me so quickly, answered my questions and solved my problems in an instant. Thank you again for such a great plugin!” – merajulbdc “Very easy to use and very effective. ICEGRAM for life.” – vginasands Available in 7 Languages Icegram Mailer is translated into English (US), Dutch, German, Spanish, French, Italian, and Portuguese, and includes a .pot file for easy localization into any language. Other Popular Plugins from the Icegram Team Email Subscribers & Newsletters (Icegram Express) – Complete self-hosted email marketing, newsletters, post notifications, and WooCommerce automation. Icegram Engage – High-converting popups, welcome bars, slide-ins, opt-ins, and lead generation campaigns. Icegram Collect – Easy contact forms, subscription forms, and lead capture with database storage. Temporary Login Without Password – Create self-expiring admin login links for developers and support teams. Duplicate Pages and Posts – One-click clone WordPress posts and pages into drafts. Icegram Cookie Manager – Fast, free GDPR and CCPA cookie consent banner for WordPress. Smart Manager – Bulk-edit WooCommerce products, orders, coupons, and WordPress posts in an Excel-like spreadsheet.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C