CVE-2013-3264

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP Ultimate Email Marketer Plugin
Vendor
CVE Published:
5 November 2013

Summary

The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers to modify list or campaign data.

References

http://secunia.com/advisories/53170
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/62621
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.