wp ultimate email marketer project vulnerabilities

Products

• wp ultimate email marketer 1

Latest wp ultimate email marketer project CVEs

Newest publication first

1. CVE-2014-4600 WP Ultimate Email Marketer <= 1.1.0 - Stored Cross-Site Scripting

   Published 2014-07-02

   Medium·CVSS 4.3 EPSS 1.6%

   Multiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) listname or (2) contact parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.