PT-2013-3867

Name of the Vulnerable Software and Affected Versions MailUp plugin for WordPress versions prior to 1.3.2 Description The issue allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks. This is due to the ajax.functions.php file not properly restricting acces...

PT-2013-2566

Name of the Vulnerable Software and Affected Versions MailUp plugin for WordPress versions prior to 1.3.3 Description The issue allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpress logged in cookie, due to incomplete access...