CVE-2013-2640

Published: Mar 22, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks via unspecified vectors related to "formData=save" requests, a different version than CVE-2013-0731.

Affected (9)

Products: Mailup: Wp Mailup

Mailup

1 product

Wp Mailup

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mailup Wp Mailup	version ≤ 1.3.1
Mailup Wp Mailup	Version 1.0.0
Mailup Wp Mailup	Version 1.1.0
Mailup Wp Mailup	Version 1.1.1
Mailup Wp Mailup	Version 1.1.2
Mailup Wp Mailup	Version 1.1.3
Mailup Wp Mailup	Version 1.21
Mailup Wp Mailup	Version 1.2
Mailup Wp Mailup	Version 1.3