7 matches found
CVE-2013-2640
ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks via unspecified vectors related to "formData=save" requests, a...
CVE-2013-0731
ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpressloggedin cookie. NOTE: this is due to an...
CVE-2013-0731
ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpressloggedin cookie. NOTE: this is due to an...
PT-2013-2566
Name of the Vulnerable Software and Affected Versions MailUp plugin for WordPress versions prior to 1.3.3 Description The issue allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpress logged in cookie, due to incomplete access...
PT-2013-3867
Name of the Vulnerable Software and Affected Versions MailUp plugin for WordPress versions prior to 1.3.2 Description The issue allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks. This is due to the ajax.functions.php file not properly restricting acces...
CVE-2013-0731: Undefined Security Weakness
ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpressloggedin cookie. NOTE: this is due to an...
CVE-2013-2640: Undefined Security Weakness
ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks via unspecified vectors related to "formData=save" requests, a...