Lucene search

K
cvelistMitreCVELIST:CVE-2013-2640
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-2640

2022-10-0316:14:59
mitre
www.cve.org
mailup plugin
security vulnerability
remote attackers
modify settings
xss attacks
wordpress
cve-2013-2640.

5.7 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks via unspecified vectors related to “formData=save” requests, a different version than CVE-2013-0731.

5.7 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%