The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers to modify list or campaign data.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: flexera

Published: 2013-11-05T20:00:00Z

Updated: 2024-09-17T00:01:44.550Z

Reserved: 2013-04-22T00:00:00Z

Link: CVE-2013-3264

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-11-05T20:55:29.023

Modified: 2024-11-21T01:53:17.867

Link: CVE-2013-3264

cve-icon Redhat

No data.