CVE-2013-3264: Medium severity wp ultimate email marketer plugin vulnerability
The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers to modify list or campaign data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3264?
The severity of CVE-2013-3264 is considered to be medium risk due to unauthorized access allowing modification of list or campaign data.
How do I fix CVE-2013-3264?
To fix CVE-2013-3264, update the WP Ultimate Email Marketer plugin to version 1.1.1 or newer as the vulnerability is addressed in these updates.
What versions of WP Ultimate Email Marketer are affected by CVE-2013-3264?
CVE-2013-3264 affects WP Ultimate Email Marketer plugin versions 1.1.0 and earlier.
What type of vulnerability is CVE-2013-3264?
CVE-2013-3264 is a security vulnerability that allows remote attackers to gain unauthorized access to modify data.
What could happen if CVE-2013-3264 is exploited?
If CVE-2013-3264 is exploited, attackers could alter email marketing lists or campaigns, potentially leading to data loss or malicious content dissemination.