CVE-2013-3264

The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2)…

published November 5, 2013

CVSS
—
EPSS
2%
Percentile
81.4
In the wild
Unconfirmed
What it is

The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers to modify list or campaign data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02083 · 81.4th percentile
Published
2013-11-05T20:00Z
EPSS history
Timeline
  • 05 NOV 20:00Z
    The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2)…
    cvelistv5