33 matches found
MailUp 1.3.2 - ajax.functions.php Ajax Function Call H&ling XSS Weakness
The MailUp newsletter sign-up form WordPress plugin was affected by an ajax.functions.php Ajax Function Call H XSS Weakness security vulnerability...
Wordpress MailUp Plugin Multiple Vulnerabilities
This host is installed with Wordpress MailUp Plugin and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwordpressmailupmultvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Wordpress MailUp Plugin Multiple Vulnerabilities Authors: Thanga Prakash S Copyright: Copyright c 2013...
WordPress MailUp Plugin Multiple Vulnerabilities
WordPress MailUp Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2640
ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks via unspecified vectors related to "formData=save" requests, a...
Cross site scripting
ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks via unspecified vectors related to "formData=save" requests, a...
CVE-2013-2640
ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks via unspecified vectors related to "formData=save" requests, a...
CVE-2013-2640
CVE-2013-2640 concerns the WordPress MailUp plugin. The affected component is ajax.functions.php, with vulnerability in access control for unspecified Ajax functions, enabling remote attackers to modify plugin settings and trigger cross-site scripting via formData=save-like requests. The advisory...
CVE-2013-0731
ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpressloggedin cookie. NOTE: this is due to an...
Cross site scripting
ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpressloggedin cookie. NOTE: this is due to an...
CVE-2013-0731
ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpressloggedin cookie. NOTE: this is due to an...
CVE-2013-0731
MailUp WordPress plugin vulnerable to an access-control flaw in ajax.functions.php. Versions before 1.3.3 allow remote modification of plugin settings and XSS by leveraging unspecified Ajax functions; this stems from an incomplete fix for a prior issue (1.3.2). A related CVE notes a similar flaw ...
WordPress WP MailUp Plugin <= 1.3.1 - BYPASS
Because of this vulnerability, the attackers can modify plugin settings and conduct cross-site scripting attacks via unspecified vectors. Solution Update the plugin...