Mailup, Inc. MailUp plugin (wp-mailup) 1.0.0

CPE Details

Mailup, Inc. MailUp plugin (wp-mailup) 1.0.0
mailup
wp-mailup
1.0.0
2013-03-22
17h17 +00:00
2013-03-26
21h46 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:mailup:wp-mailup:1.0.0:*:*:*:*:*:*:*

Informations

Vendor

mailup

Product

wp-mailup

Version

1.0.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2013-2640 2013-03-22 17h00 +00:00 ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks via unspecified vectors related to "formData=save" requests, a different version than CVE-2013-0731.
5
CVE-2013-0731 2013-03-22 14h00 +00:00 ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks by setting the wordpress_logged_in cookie. NOTE: this is due to an incomplete fix for a similar issue that was fixed in 1.3.2.
5