PT-2013-4262

Name of the Vulnerable Software and Affected Versions WP Ultimate Email Marketer plugin version 1.1.0 and possibly earlier Description The issue concerns improper access restriction to certain API endpoints, specifically "list/edit.php" and "campaign/editCampaign.php", allowing remote attackers t...

CVE-2013-3264: Undefined Security Weakness

The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to 1 list/edit.php and 2 campaign/editCampaign.php, which allows remote attackers to modify list or campaign data...