CVE-2013-3264

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-05 · updated 2026-06-16
Weakness: CWE-264

Description

The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers to modify list or campaign data.

Affected products

smackcoders Wp Ultimate Email Marketer Plugin: through 1.1.0; 1.0.0, 1.0.1, 1.0.2, 1.0.3

References

http://secunia.com/advisories/53170
http://www.securityfocus.com/bid/62621
http://secunia.com/advisories/53170
http://www.securityfocus.com/bid/62621

Get alerted when CVE-2013-3264 or the next vulnerability affects your stack