Lucene search
MitreCVELIST:CVE-2013-2640HistoryMar 22, 2013 - 5:00 p.m.
CVE-2013-2640
2013-03-2217:00:00
mitre
www.cve.org
2
mailup plugin
security vulnerability
remote attackers
modify settings
xss attacks
wordpress
cve-2013-2640.
ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks via unspecified vectors related to “formData=save” requests, a different version than CVE-2013-0731.
Related
wpvulndb
wpvulndb
MailUp 1.3.2 - ajax.functions.php Ajax Function Call H&ling XSS Weakness
2014-08-01 10:59:05
prion
prion
Cross site scripting
2013-03-22 17:55:00
Cross site scripting
2013-03-22 15:55:00
cve
cve
CVE-2013-2640
2013-03-22 17:55:01
CVE-2013-0731
2013-03-22 15:55:01
nvd
nvd
CVE-2013-2640
2013-03-22 17:55:01
CVE-2013-0731
2013-03-22 15:55:01
cvelist
cvelist
CVE-2013-0731
2013-03-22 15:00:00
patchstack
patchstack
WordPress WP MailUp Plugin <= 1.3.2 - XSS
2013-01-02 00:00:00
WordPress WP MailUp Plugin <= 1.3.1 - BYPASS
2013-03-22 00:00:00
openvas
openvas
WordPress MailUp Plugin Multiple Vulnerabilities
2013-03-26 00:00:00
Wordpress MailUp Plugin Multiple Vulnerabilities
2013-03-26 00:00:00